VDB
CVE-2025-15536
CVE-2025-15536
PUBLISHED
CVSS 4.800000190734863 MEDIUM
Open Chinese Convert has Out-of-bounds Write
EPSS 0.25% · 16.7th percentile
Risk Scores
CVSS 4.0
4.800000190734863
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS Score
0.25%
16.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| npm | opencc | 0 |
| byvoid | open_chinese_convert | 0 |
| BYVoid | OpenCC | 1.1.0, 1.1.1, 1.1.2 |
Timeline
- Jan 13, 2026 Fix PR Merged
- Jan 18, 2026 CVE Published
- Jan 18, 2026 EPSS Score
- Jan 18, 2026 PoC Published
- Jan 21, 2026 EPSS Score
- Jan 22, 2026 PoC Published
- Jan 25, 2026 EPSS Score
- Jan 28, 2026 EPSS Score
- Feb 1, 2026 EPSS Score
- Feb 1, 2026 PoC Published
- Feb 4, 2026 EPSS Score
- Feb 8, 2026 EPSS Score
References
- https://github.com/BYVoid/OpenCC/commit/345c9a50ab07018f1b4439776bad78a0d40778ec fix
- https://github.com/BYVoid/OpenCC/issues/997 discussion
- https://github.com/BYVoid/OpenCC/pull/1005 fix
- VDB-341708 | BYVoid OpenCC MaxMatchSegmentation.cpp MaxMatchSegmentation heap-based overflow vdb
- VDB-341708 | CTI Indicators (IOB, IOC, IOA) url
- Submit #733347 | BYVoid OpenCC ver.1.1.9 and master-branch Heap-based Buffer Overflow third-party-advisory
- https://github.com/oneafter/1222/blob/main/repro exploit
- https://nvd.nist.gov/vuln/detail/CVE-2025-15536 advisory
- https://github.com/BYVoid/OpenCC package
- https://github.com/BYVoid/OpenCC/ technical