ByteOS Network

NVD Vulnerability Details :

CVE-2025-32386

Awaiting Analysis

Source-security-advisories@github.com

Published At-09 Apr, 2025 | 23:15

Updated At-11 Apr, 2025 | 15:40

Helm is a tool for managing Charts. A chart archive file can be crafted in a manner where it expands to be significantly larger uncompressed than compressed (e.g., >800x difference). When Helm loads this specially crafted chart, memory can be exhausted causing the application to terminate. This issue has been resolved in Helm v3.17.3.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weaknesses

CWE ID	Type	Source
CWE-770	Primary	security-advisories@github.com
CWE-789	Primary	security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/helm/helm/commit/d8ca55fc669645c10c0681d49723f4bb8c0b1ce7	security-advisories@github.com	N/A
https://github.com/helm/helm/security/advisories/GHSA-4hfp-h4cw-hj8p	security-advisories@github.com	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History