---
id: CVE-2025-71436
title: >-
  Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap Buffer Overflow via
  Language Tag
summary: >-
  Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based
  buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused
  by truncating language tag length to an unsigned char. Attackers can supply
  Turtle,…
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H'
cvssSource: cna
cwe:
  - CWE-122
vendor: librdf
product: Raptor RDF Syntax Library
affected:
  - raptor_rdf_syntax_library >= 2.0.15 <= 2.0.16
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-20T16:41:11.096426Z'
exploitAvailable: true
published: '2026-10-20'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T16:41:49.461Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-71436'
references:
  - url: 'https://github.com/dajobe/raptor/issues/83'
  - url: >-
      https://github.com/dajobe/raptor/commit/361a803a72817ae771db2438277229e6541e1575
  - url: >-
      https://github.com/dajobe/raptor/blob/raptor2_2_0_16/src/raptor_term.c#L200-L218
  - url: >-
      https://github.com/dajobe/raptor/blob/raptor2_2_0_16/src/raptor_term.c#L270-L287
  - url: >-
      https://www.vulncheck.com/advisories/raptor-rdf-syntax-library-2.0.15-through-2.0.16-heap-buffer-overflow-via-language-tag
    label: >-
      VulnCheck Advisory: Raptor RDF Syntax Library 2.0.15 through 2.0.16 Heap
      Buffer Overflow via Language Tag
tags:
  - cve.org
  - exploit-available
ingestedAt: '2026-10-20T16:10:53.306Z'
---

## Overview

Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.

## Affected

- `raptor_rdf_syntax_library >= 2.0.15 <= 2.0.16`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.