High severity7.5NVD Advisory· Published Dec 5, 2025· Updated Jun 17, 2026

CVE-2025-13654

Description

A stack buffer overflow vulnerability exists in the buffer_get function of duc, a disk management tool, where a condition can evaluate to true due to underflow, allowing an out-of-bounds read.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Duc/Ducv5
Range: 0
Zevv/Duc
cpe:2.3:a:zevv:duc:*:*:*:*:*:*:*:*
Range: <1.4.6
osv-coords
pkg:rpm/opensuse/duc&distro=openSUSE%20Tumbleweed
Range: < 1.4.6-1.1

Patches

Vulnerability mechanics

References

hackingbydoing.wixsite.com/hackingbydoing/post/stack-buffer-overflow-in-ducnvdExploitThird Party Advisory
kb.cert.org/vuls/id/441887nvdThird Party Advisory
www.kb.cert.org/vuls/id/441887nvdThird Party Advisory
github.com/zevv/duc/releases/tag/1.4.6nvdRelease Notes
github.com/zevv/duc/commit/8638c4365ffd9e1966bdef8af6339dbee8c17e66nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000