CVE-2025-15281

🗓️ 20 Jan 2026 13:22:46Reported by Debian Security Bug TrackerType

CVE-2025-15281: Wordexp with WRDE_REUSE and WRDE_APPEND in glibc 2.0–2.42 may leave we_wordv uninitialized and crash.

Reporter	Title	Published	Views	Family All 156
IBM Security Bulletins	Security Bulletin: glibc vulnerability	18 May 202620:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	21 May 202615:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GNU C affects IBM Netezza Appliance	23 Apr 202610:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Agent images	29 Jun 202609:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	11 May 202623:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	7 Apr 202616:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	14 Apr 202615:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in CICS Transaction Gateway for Multiplatforms.	21 May 202614:27	–	ibm
ATTACKERKB	CVE-2025-15281	20 Jan 202613:22	–	attackerkb
Tenable Nessus	AlmaLinux 9 : glibc (ALSA-2026:2786)	19 Feb 202600:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	11	any	glibc	2.31-13+deb11u14	glibc_2.31-13+deb11u14_any.deb
Debian	12	any	glibc	2.36-9+deb12u14	glibc_2.36-9+deb12u14_any.deb
Debian	13	any	glibc	2.41-12+deb13u2	glibc_2.41-12+deb13u2_any.deb
Debian	14	any	glibc	2.42-11	glibc_2.42-11_any.deb
Debian	999	any	glibc	2.42-11	glibc_2.42-11_any.deb

20 Jan 2026 13:22Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.00439

SSVC