CVEvulnerability

CVE-2025-47256

5.6 MEDIUM Published 2025-05-06 Modified 2026-06-17 Official page ↗

Status: Deferred
Published: 2025-05-06
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.6 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Weaknesses: CWE-191

Description

Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file.

Weakness · CWE (1)

CWE-191 Integer Underflow (Wrap or Wraparound) weakness

References

https://github.com/GCatt-AS/CVE-2025-47256 github.com
https://github.com/libxmp/libxmp/blob/ec22d1c7b93c8f681f8504a6c61c6f8a52458a10/src/loaders/prowizard/pha.c#L35 github.com
https://github.com/libxmp/libxmp/issues/847 github.com

CVE-2025-47256

Description

Related

Weakness · CWE (1)

References