CVE-2025-14310

CriticalCVSS 9.3

Published: 09/12/2025(UTC)Updated: 15/10/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

32th percentile - higher than 32% of all known CVEs

Summary

RethinkDB before version 2.4.4 contains a classic buffer overflow vulnerability due to copying data without checking input size. This can lead to crashes or potential arbitrary code execution.

Risk Assessment

An attacker could exploit this vulnerability to cause service crashes or potentially execute arbitrary code on the system, leading to data integrity compromise.

Recommendation

Upgrade RethinkDB to version 2.4.4 or later to remediate the vulnerability.

Other vulnerabilities in RethinkDB

CVE-2026-24810Critical
Classic buffer overflow in rethinkdb up to v2.4.4 in cJSON.Cc. May lead to memory corruption.

Original NVD description (English source)

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in rethinkdb.This issue affects rethinkdb: before 2.4.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS