CVE-2025-59375

Katalog CVE

CVSS 7.5 · High EPSS 1,3%

Kerentanan Allocation of Resources Without Limits or Throttling pada libexpat project libexpat. Skor CVSS 3.1 7.5 (High) menurut mitre.org.

Deskripsi (NVD)

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

Rincian

Terbit di NVD

15 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber mitre.org
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/libexpat/libexpat/issues/1018 exploit · issue tracking
• https://issues.oss-fuzz.com/issues/439133977 exploit · issue tracking
• https://github.com/libexpat/libexpat/blob/676a4c531ec768732fac215da9730b5f50fbd2bf/expat/Changes#L45-L74 product
• https://github.com/libexpat/libexpat/blob/R_2_7_2/expat/Changes product
• https://github.com/libexpat/libexpat/pull/1034 issue tracking
• http://www.openwall.com/lists/oss-security/2025/09/16/2
• http://www.openwall.com/lists/oss-security/2026/05/01/5
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html
• https://cert-portal.siemens.com/productcert/html/ssa-089022.html