Логотип exploitDog
bind:CVE-2025-42971
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-42971

Количество 3

Количество 3

nvd логотип

CVE-2025-42971

7 месяцев назад

A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high privileged victim extracts this malicious archive, it gets processed by SAPCAR on their system, resulting in out-of-bounds memory read and write. This could lead to file extraction and file overwrite outside the intended directories. This vulnerability has low impact on the confidentiality, integrity and availability of the application.

CVSS3: 4
EPSS: Низкий
github логотип

GHSA-vpw2-377f-3mm6

7 месяцев назад

A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high privileged victim extracts this malicious archive, it gets processed by SAPCAR on their system, resulting in out-of-bounds memory read and write. This could lead to file extraction and file overwrite outside the intended directories. This vulnerability has low impact on the confidentiality, integrity and availability of the application.

CVSS3: 4
EPSS: Низкий
fstec логотип

BDU:2025-10655

7 месяцев назад

Уязвимость утилиты сжатия и распаковки файлов SAPCAR, связанная с записью за границами буфера, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-42971

A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high privileged victim extracts this malicious archive, it gets processed by SAPCAR on their system, resulting in out-of-bounds memory read and write. This could lead to file extraction and file overwrite outside the intended directories. This vulnerability has low impact on the confidentiality, integrity and availability of the application.

CVSS3: 4
0%
Низкий
7 месяцев назад
github логотип
GHSA-vpw2-377f-3mm6

A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high privileged victim extracts this malicious archive, it gets processed by SAPCAR on their system, resulting in out-of-bounds memory read and write. This could lead to file extraction and file overwrite outside the intended directories. This vulnerability has low impact on the confidentiality, integrity and availability of the application.

CVSS3: 4
0%
Низкий
7 месяцев назад
fstec логотип
BDU:2025-10655

Уязвимость утилиты сжатия и распаковки файлов SAPCAR, связанная с записью за границами буфера, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

CVSS3: 4
0%
Низкий
7 месяцев назад

Уязвимостей на страницу