Unrated severityNVD Advisory· Published Dec 5, 2025· Updated Jan 29, 2026

CVE-2025-13654

Description

A stack buffer overflow vulnerability exists in the buffer_get function of duc, a disk management tool, where a condition can evaluate to true due to underflow, allowing an out-of-bounds read.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

osv-coords
pkg:rpm/opensuse/duc&distro=openSUSE%20Tumbleweed
Range: < 1.4.6-1.1
Duc/Ducv5
Range: 0

Patches

Vulnerability mechanics

References

github.com/zevv/duc/releases/tag/1.4.6mitre
hackingbydoing.wixsite.com/hackingbydoing/post/stack-buffer-overflow-in-ducmitre
kb.cert.org/vuls/id/441887mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000