CVE-2025-71436
Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via Language Tag
CVSS Score
7.1
EPSS Score
0.0%
EPSS Percentile
0th
Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.
| CWE | CWE-122 |
| Vendor | librdf |
| Product | raptor rdf syntax library |
| Published | Oct 20, 2026 |
| Last Updated | Oct 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for librdf raptor rdf syntax library
Be the first to know when new high vulnerabilities affecting librdf raptor rdf syntax library are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High
Affected Versions
librdf / Raptor RDF Syntax Library
2.0.15 ≤ 2.0.16
References
github.com: https://github.com/dajobe/raptor/issues/83 github.com: https://github.com/dajobe/raptor/commit/361a803a72817ae771db2438277229e6541e1575 github.com: https://github.com/dajobe/raptor/blob/raptor2_2_0_16/src/raptor_term.c#L200-L218 github.com: https://github.com/dajobe/raptor/blob/raptor2_2_0_16/src/raptor_term.c#L270-L287 vulncheck.com: https://www.vulncheck.com/advisories/raptor-rdf-syntax-library-2.0.15-through-2.0.16-heap-buffer-overflow-via-language-tag
Credits
Pedro Ribeiro (@pedrib1337) from Agile Information Security