VDB

CVE-2025-5031

CVE-2025-5031 PUBLISHED CVSS 2.299999952316284 LOW

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the component wxapkg File Decompression Handler. The manipulation leads to resource consumption. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.

EPSS 0.32% · 55.3th percentile

Risk Scores

CVSS 4.0
2.299999952316284
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS Score
0.32%
55.3th percentile

Affected Products

VendorProductVersions
github.comAckites/KillWxapkg0, 0
AckitesKillWxapkg2.4.0, 2.4.1, 2.4.0

Exploit Intelligence

Timeline

  • May 21, 2025 CVE Published
  • May 21, 2025 PoC Published
  • May 22, 2025 EPSS Score
  • May 27, 2025 Coalition ESS Score
  • Jun 2, 2025 EPSS Score
  • Jun 13, 2025 EPSS Score
  • Jun 20, 2025 Coalition ESS Score
  • Jun 24, 2025 EPSS Score
  • Jul 6, 2025 EPSS Score
  • Jul 17, 2025 EPSS Score
  • Jul 28, 2025 EPSS Score
  • Aug 8, 2025 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›