PyPI/spdk CVE-2025-57275: medium 5.5, EPSS 0.33%

SPDK is vulnerable to buffer overflow in the NVMe-oF target component

Action: Upgrade spdk to 25.9 or later.

pip install spdk==25.9

Affected

Fixed versions

Sources

• osv: GHSA-5m5w-w2h2-fqgq
• https://nvd.nist.gov/vuln/detail/CVE-2025-57275
• https://github.com/spdk/spdk/commit/8981ddb1ccaf54f85d34482a5a644e075b58cb36
• https://github.com/spdk/spdk/commit/f786c6d75f5c5162363a621b24f5449c729679c9
• https://github.com/spdk/spdk
• https://spdk.io

CVE-2025-57275 · published 2025-10-01T15:30:34Z · modified 2026-09-10T03:50:29.279895975Z · JSON