CVE-2025-6536 MEDIUM

CVE-2025-6536: Tarantool datetime.c tm_to_datetime assertion

Vendor N/A
Product Tarantool
Weakness CWE-617
Published June 24, 2025
Last update June 24, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tm_to_datetime in the library src/lib/core/datetime.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

June 24, 2025 CVE published
June 24, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-35952 `CHECK` failures in `UnbatchGradOp` in TensorFlow CVE-2024-33601 nscd: netgroup cache may terminate daemon on memory allocation failure CVE-2021-1422 Cisco Adaptive Security Appliance Software Release 9.16.1 and Cisco Firepower Threat Defense Software Release 7.0.0 IPsec Denial of Service Vulnerability CVE-2023-39949 Improper validation of sequence numbers leading to remotely reachable assertion failure CVE-2023-33095 Reachable Assertion in Multi-Mode Call Processor