VDB

CVE-2025-48174

CVE-2025-48174 PUBLISHED CVSS 4.5 MEDIUM

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.

EPSS 0.37% · 31.2th percentile

Risk Scores

CVSS 3.1
4.5
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
EPSS Score
0.37%
31.2th percentile

Affected Products

VendorProductVersions
aomedialibavif0, 0, 0

Timeline

  • May 16, 2025 CVE Published
  • May 16, 2025 EPSS Score
  • May 28, 2025 EPSS Score
  • Jun 9, 2025 EPSS Score
  • Jun 21, 2025 EPSS Score
  • Jul 4, 2025 EPSS Score
  • Jul 16, 2025 EPSS Score
  • Jul 28, 2025 EPSS Score
  • Aug 9, 2025 EPSS Score
  • Aug 17, 2025 PoC Published
  • Aug 17, 2025 PoC Published
  • Aug 21, 2025 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›