What is GHSA-5m5w-w2h2-fqgq?

GHSA-5m5w-w2h2-fqgq is a security advisory published by GitHub Security Advisories with Medium severity. SPDK is vulnerable to buffer overflow in the NVMe-oF target component

Which CVE IDs does GHSA-5m5w-w2h2-fqgq cover?

GHSA-5m5w-w2h2-fqgq covers the following CVE IDs: CVE-2025-57275. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5m5w-w2h2-fqgq?

GHSA-5m5w-w2h2-fqgq has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

Which products are affected by GHSA-5m5w-w2h2-fqgq?

GHSA-5m5w-w2h2-fqgq affects 1 product, including: pip/spdk:\u003c 25.9.

GHSA-5m5w-w2h2-fqgqMediumCVSS 5.5

SPDK is vulnerable to buffer overflow in the NVMe-oF target component

Vendor

GitHub Security Advisories

Published

October 1, 2025

Last Modified

October 21, 2025

🔗 CVE IDs covered (1)

CVE-2025-57275 →

📋 Description

Storage Performance Development Kit (SPDK) 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf.

🎯 Affected products1

pip/spdk:< 25.9

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2025-57275
https://github.com/spdk/spdk/commit/f786c6d75f5c5162363a621b24f5449c729679c9
https://spdk.io
https://github.com/spdk/spdk/commit/8981ddb1ccaf54f85d34482a5a644e075b58cb36
https://github.com/advisories/GHSA-5m5w-w2h2-fqgq