CVE-2025-0633 MEDIUM

CVE-2025-0633: Heap Overflow in iniparser.c

Vendor Iniparser
Product iniparser
Weakness CWE-122
Published February 19, 2025
Last update February 19, 2025
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory

Key dates

02Disclosure timeline

February 19, 2025 CVE published
February 19, 2025 Record updated