HIGH
librdf
CVE published 2026-10-20
CVE-2025-71436
A heap-based buffer overflow vulnerability exists in Raptor RDF Syntax Library versions 2.0.15 through 2.0.16. The issue arises from the raptor_new_term_from_counted_literal() function, which truncates language tag lengths to an unsigned char. This can be exploited by supplying Turtle, TriG, N-Triples, or N-Quads documents with language tags of 256 bytes or longer, potentially leading to heap memory corru [truncated]