CVE-2025-4437

Description

CRI-O has Potential High Memory Consumption from File Read in github.com/cri-o/cri-o

Affected packages (2)

• Go/github.com/cri-o/cri-ofrom 0, <= 1.33.3
• Go/github.com/cri-o/cri-ofrom 0

CVSS scores

References (6)

• ADVISORYhttps://github.com/advisories/GHSA-8f93-j3fx-72f3
• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-4437
• PATCHhttps://github.com/cri-o/cri-o
• WEBhttps://access.redhat.com/security/cve/CVE-2025-4437
• WEBhttps://bugzilla.redhat.com/show_bug.cgi?id=2375084
• WEBhttps://pkg.go.dev/vuln/GO-2025-3897