TA-Lib ta_regtest test_minmax.c setInputBuffer out-of-bounds write

published 2025-03-31 19 mo ago modified 2026-06-17 4 mo ago also EUVD-2025-9023

cvss: 5.3; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.2%; EPSS 0.2% chance of exploitation in 30 days, percentile 8%
public exploits: 0; none known

A vulnerability, which was classified as critical, has been found in TA-Lib up to 0.6.4. This issue affects the function setInputBuffer of the file src/tools/ta_regtest/ta_test_func/test_minmax.c of the component ta_regtest. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The identifier of the patch is 5879180e9070ec35d52948f2f57519713256a0f1. It is recommended to apply a patch to fix this issue.

Patch / fix

links 2

github.com/TA-Lib/ta-lib@5879180 commit
github.com/TA-Lib/ta-lib#62 pull request

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: partial
Assessed: 19 mo ago (2025-04-01)

Exploit prediction

0.19% chance of exploitation in the next 30 days, higher than 8% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

github.com https://github.com/TA-Lib/ta-lib/issues/61#issue-2931609110 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	4.0	4.8	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
CNA	3.1	5.3	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CNA	3.0	5.3	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CNA	2.0	4.3	AV:L/AC:L/Au:S/C:P/I:P/A:P
CNA	4.0	4.8	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

n/a TA-Lib

Classification

Weakness

CWE-787 Out-of-bounds Write
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

github.com /TA-Lib/ta-lib/pull/62
issue-tracking
github.com /TA-Lib/ta-lib/commit/5879180e9070ec35d52948f2f57519713256a0f1
patch
github.com /TA-Lib/ta-lib/issues/61#issue-2931609110
exploit, issue-tracking
vuldb.com /?id.302069
vdb-entry, technical-description
vuldb.com /?ctiid.302069
signature, permissions-required
vuldb.com /?submit.524603
third-party-advisory
github.com /TA-Lib/ta-lib/issues/61
issue-tracking

Sources

CVE List CVE-2025-3017
NVD CVE-2025-3017

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary