VDB
CVE-2025-5031
CVE-2025-5031
PUBLISHED
CVSS 2.299999952316284 LOW
A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the component wxapkg File Decompression Handler. The manipulation leads to resource consumption. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
EPSS 0.43% · 34.6th percentile
Risk Scores
CVSS 4.0
2.299999952316284
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS Score
0.43%
34.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | Ackites/KillWxapkg | 0, 0 |
| Ackites | KillWxapkg | 2.4.0, 2.4.1, 2.4.0 |
Timeline
- May 21, 2025 CVE Published
- May 21, 2025 PoC Published
- May 22, 2025 EPSS Score
- May 27, 2025 Coalition ESS Score
- Jun 3, 2025 EPSS Score
- Jun 14, 2025 EPSS Score
- Jun 20, 2025 Coalition ESS Score
- Jun 26, 2025 EPSS Score
- Jul 7, 2025 EPSS Score
- Jul 19, 2025 EPSS Score
- Jul 31, 2025 EPSS Score
- Aug 11, 2025 EPSS Score
References
- VDB-309851 | CTI Indicators (IOB, IOC, TTP) url
- https://github.com/Ackites/KillWxapkg/issues/86 discussion
- https://github.com/Ackites/KillWxapkg/issues/86#issue-3053628148 discussion
- https://nvd.nist.gov/vuln/detail/CVE-2025-5031 advisory
- https://vuldb.com/?id.309851 url
- https://vuldb.com/?submit.580524 technical
- https://github.com/Ackites/KillWxapkg package