CVE-2025-71436

High

Description

Raptor RDF Syntax Library from 2.0.15 through 2.0.16 contains a heap-based buffer overflow vulnerability in raptor_new_term_from_counted_literal() caused by truncating language tag length to an unsigned char. Attackers can supply Turtle, TriG, N-Triples or N-Quads documents with language tags of 256 bytes or longer to corrupt heap memory, crash applications, and possibly execute code.

SeverityHigh

CVSS7.1

Exploit probability—

ProductRaptor RDF Syntax Library

PublishedOct 20, 2026

First seenOct 20, 2026

Weakness typeCWE-122CWE-122

How to fix

Patches

github.com/dajobe/raptor/commit/361a803a72817ae771db2438277229e6541e1575

Affected products

Product	Affected versions	Fixed in
librdf Raptor RDF Syntax Library	2.0.15 ≤ v ≤ 2.0.16	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.