CVE-2025-9820 | GnuTLS up to 3.8.10 PKCS Token pkcs11_write.c gnutls_pkcs11_token_init stack-based overflow

November 21, 2025 Yanac

A vulnerability marked as critical has been reported in GnuTLS up to 3.8.10. This affects the function gnutls_pkcs11_token_init of the file pkcs11_write.c of the component PKCS Token Handler. This manipulation causes stack-based buffer overflow.

This vulnerability appears as CVE-2025-9820. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More