{"id":"CVE-2025-6395","title":"A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().","summary":"A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","cwe":["CWE-476"],"published":"2025-07-10","updated":"2026-06-25","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-6395","references":[{"url":"https://access.redhat.com/errata/RHSA-2025:16115","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:16116","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:17181","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:17348","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:17361","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:17415","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:19088","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2025:22529","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2025-6395","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2376755","label":"secalert@redhat.com"},{"url":"https://gitlab.com/gnutls/gnutls/-/issues/1718","label":"secalert@redhat.com"},{"url":"https://lists.gnupg.org/pipermail/gnutls-help/2025-July/004883.html","label":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2025/07/11/3","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.debian.org/debian-lts-announce/2025/08/msg00005.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}],"tags":["nvd"],"epss":0.00676,"epssPercentile":0.50846,"ingestedAt":"2026-06-29T13:24:34.393Z","slug":"CVE-2025-6395","body":"## Overview\n\nA NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}