{"id":"CVE-2025-71436","kind":"vulnerability","aliases":["CVE-2025-71436"],"related":[],"title":"Raptor RDF library: heap overflow from long language tags in RDF documents","description":"Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.","summary":"Raptor, a C library for parsing RDF data, truncates language tag lengths to an unsigned char, so Turtle, TriG, N-Triples or N-Quads input with language tags of 256 bytes or more corrupts heap memory. An attacker who supplies such a document can crash the parsing application and possibly run code.","severity":"high","cvss":7.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["c","libraries","package","raptor","rdf","semantic-web"],"not_affected_if":["no-rdf-parsing","trusted-input-only"],"how_to_check":"- Check the installed Raptor version with `raptor2-config --version` or the package manager, and look for versions `2.0.15` and `2.0.16`.\n- Search application dependencies and bundled libraries for `raptor2` or `libraptor`.\n- unknown","fix":"- Move Raptor past `2.0.16` once a fixed release is available; the sources do not name the fixed version.\n- Until patched, reject or pre-filter RDF input with language tags of 256 bytes or longer.","status":"open","published_at":"2026-10-20T16:16:59+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","triaged_at":"2026-10-25T03:34:41+00:00","updated_at":"2026-10-25T03:34:41+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-25T03:34:41Z","model":"claude-haiku-5-5","output":{"fix":"- Move Raptor past `2.0.16` once a fixed release is available; the sources do not name the fixed version.\n- Until patched, reject or pre-filter RDF input with language tags of 256 bytes or longer.","reach":"internet","title":"Raptor RDF library: heap overflow from long language tags in RDF documents","impact":"high","summary":"Raptor, a C library for parsing RDF data, truncates language tag lengths to an unsigned char, so Turtle, TriG, N-Triples or N-Quads input with language tags of 256 bytes or more corrupts heap memory. An attacker who supplies such a document can crash the parsing application and possibly run code.","category":"package","nicknames":[],"who_cares":["raptor","rdf","c","libraries","semantic-web"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Heap corruption crashes the parser and may allow code execution.","analyst_note":"Find the fixed Raptor version and any vendor advisory; the NVD entry alone does not name a patched release.","how_to_check":"- Check the installed Raptor version with `raptor2-config --version` or the package manager, and look for versions `2.0.15` and `2.0.16`.\n- Search application dependencies and bundled libraries for `raptor2` or `libraptor`.\n- unknown","needs_analyst":true,"not_affected_if":["no-rdf-parsing","trusted-input-only"],"who_is_affected":"Systems that run Raptor 2.0.15 or 2.0.16 to parse RDF documents in Turtle, TriG, N-Triples or N-Quads format are exposed, especially when they accept documents from outside users or other systems. Teams that do not parse RDF with Raptor, or that run only on trusted local data, can skip it.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000661,"input_tokens":3376,"output_tokens":646,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2025':14A,17A '-71436':15A,18A '2.0.15':86C '2.0.16':88C '256':58B,131C 'applic':76B,140C 'attack':66B,114C 'base':93C 'buffer':94C 'byte':59B,132C 'c':19B,29B 'caus':104C 'char':42B,113C 'code':80B,144C 'contain':89C 'corrupt':62B,136C 'count':102C 'crash':73B,139C 'cve':13A,16A 'data':34B 'document':12A,71B,126C 'execut':143C 'heap':4A,63B,92C,137C 'heap-bas':91C 'input':53B 'languag':8A,36B,55B,107C,128C 'length':38B,109C 'librari':3A,20B,30B,84C 'liter':103C 'long':7A 'longer':134C 'memori':64B,138C 'n':47B,51B,120C,124C 'n-quad':50B,123C 'n-tripl':46B,119C 'new':99C 'overflow':5A,95C 'packag':21B 'pars':32B,75B 'possibl':78B,142C 'quad':52B,125C 'raptor':1A,22B,27B,81C,98C 'rdf':2A,11A,23B,33B,82C 'run':79B 'semant':25B 'semantic-web':24B 'suppli':68B,116C 'syntax':83C 'tag':9A,37B,56B,108C,129C 'term':100C 'trig':45B,118C 'tripl':48B,121C 'truncat':35B,106C 'turtl':44B,117C 'unsign':41B,112C 'vulner':96C 'web':26B","nicknames":[],"mitigations":[],"who_affected":"Systems that run Raptor 2.0.15 or 2.0.16 to parse RDF documents in Turtle, TriG, N-Triples or N-Quads format are exposed, especially when they accept documents from outside users or other systems. Teams that do not parse RDF with Raptor, or that run only on trusted local data, can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T16:16:59+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2025-71436","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71436","severity":null,"published_at":"2026-10-20T16:16:59+00:00","modified_at":"2026-10-20T20:06:37+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","fetched_at":"2026-10-23T22:28:58+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}