CVE-2025-15564

Katalog CVE

CVSS 5.5 · Medium EPSS 0,23%

Kerentanan Divide By Zero pada mapnik. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Rincian

Terbit di NVD

7 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-369: Divide By Zero
CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

0,23% peluang dieksploitasi; lebih tinggi dari 12,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.344502 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.743386 advisory pihak ketiga · vdb entry
• https://github.com/mapnik/mapnik/issues/4545 exploit · issue tracking
• https://github.com/oneafter/1219/blob/main/repro exploit
• https://github.com/mapnik/mapnik/ product
• https://vuldb.com/?ctiid.344502 permissions required · vdb entry