CVE-2025-6490 | sparklemotion nokogiri up to 1.18.7 hashmap.c hashmap_set_with_hash heap-based overflow

SecurityVulns

A vulnerability was found in sparklemotion nokogiri up to 1.18.7 and classified as problematic. This issue affects the function hashmap_set_with_hash of the file gumbo-parser/src/hashmap.c. The manipulation leads to heap-based buffer overflow.

The identification of this vulnerability is CVE-2025-6490. An attack has to be approached locally. Furthermore, there is an exploit available.VulDB Recent EntriesRead More