CVE-2025-48188

Опубликовано: 16 мая 2025

Источник: nvd

CVSS3: 2.9

CVSS3: 5.5

EPSS Низкий

Описание

libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer over-read.

Ссылки

https://savannah.gnu.org/bugs/?67079
Exploit
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:pspp:*:*:*:*:*:*:*:*

Версия до 2.0.1 (включая)

EPSS

Процентиль: 5%

0.00022

Низкий

2.9 Low

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2025-48188

CVSS3: 2.9

ubuntu

9 месяцев назад

libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer over-read.

CVE-2025-48188

CVSS3: 2.9

debian

9 месяцев назад

libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fi ...

GHSA-x4wp-4w98-53c5

CVSS3: 2.9

github

9 месяцев назад

libpspp-core.a in GNU PSPP through 2.0.1 has an incorrect call from fill_buffer (in data/encrypted-file.c) to the Gnulib rijndaelDecrypt function, leading to a heap-based buffer over-read.

EPSS

Процентиль: 5%

0.00022

Низкий

2.9 Low

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-125