What the vulnerability does
01Description
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
CVSS base score
8.1/10
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Key dates
02Disclosure timeline
January 10, 2024
CVE published
June 17, 2025
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2024-23125 Multiple Vulnerabilities in the Autodesk AutoCAD Desktop Software
CVE-2021-1324 Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities
CVE-2025-29951
CVE-2025-9938 D-Link DI-8400 yyxz.asp yyxz_dlink_asp stack-based overflow
CVE-2025-15013 floooh sokol sokol_gfx.h _sg_validate_pipeline_desc stack-based overflow
