csaf_ncscnl - ncsc-2025-0130

ncsc-2025-0130

Vulnerability from csaf_ncscnl

Published

2025-04-16 15:04

Modified

2025-04-16 15:04

Summary

Kwetsbaarheden verholpen in Oracle Java

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

Oracle heeft kwetsbaarheden verholpen in Oracle Java SE en GraalVM (Specifiek voor versies 17.0.14, 21.0.6, 21.0.6 en 24).

Interpretaties

De kwetsbaarheden in Oracle Java SE en GraalVM stellen ongeauthenticeerde kwaadwillenden met netwerktoegang in staat om kritieke gegevens te manipuleren of te benaderen. Dit kan leiden tot ongeautoriseerde toegang tot gegevens, vooral via API's en in omgevingen die onbetrouwbare code uitvoeren. De kwetsbaarheid in de GStreamer-bibliotheek kan ook leiden tot geheugenproblemen en mogelijk willekeurige code-executie door beschadigde pointers.

Oplossingen

Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans

medium

Schade

high

CWE-190

Integer Overflow or Wraparound

CWE-284

Improper Access Control

CWE-863

Incorrect Authorization

CWE-787

Out-of-bounds Write

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Oracle heeft kwetsbaarheden verholpen in Oracle Java SE en GraalVM (Specifiek voor versies 17.0.14, 21.0.6, 21.0.6 en 24).",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden in Oracle Java SE en GraalVM stellen ongeauthenticeerde kwaadwillenden met netwerktoegang in staat om kritieke gegevens te manipuleren of te benaderen. Dit kan leiden tot ongeautoriseerde toegang tot gegevens, vooral via API\u0027s en in omgevingen die onbetrouwbare code uitvoeren. De kwetsbaarheid in de GStreamer-bibliotheek kan ook leiden tot geheugenproblemen en mogelijk willekeurige code-executie door beschadigde pointers.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Integer Overflow or Wraparound",
        "title": "CWE-190"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Incorrect Authorization",
        "title": "CWE-863"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd; oracle",
        "url": "https://www.oracle.com/security-alerts/cpuapr2025.html"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Oracle Java",
    "tracking": {
      "current_release_date": "2025-04-16T15:04:40.041941Z",
      "generator": {
        "date": "2025-02-25T15:15:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.0"
        }
      },
      "id": "NCSC-2025-0130",
      "initial_release_date": "2025-04-16T15:04:40.041941Z",
      "revision_history": [
        {
          "date": "2025-04-16T15:04:40.041941Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:oracle/17.0.14",
                    "product": {
                      "name": "vers:oracle/17.0.14",
                      "product_id": "CSAFPID-2699120",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.14:*:*:*:*:*:*:*"
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:oracle/21.0.6",
                    "product": {
                      "name": "vers:oracle/21.0.6",
                      "product_id": "CSAFPID-2699118",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.6:*:*:*:*:*:*:*"
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:oracle/24",
                    "product": {
                      "name": "vers:oracle/24",
                      "product_id": "CSAFPID-2699115",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:oracle:graalvm_for_jdk:24:*:*:*:*:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Oracle GraalVM for JDK"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:oracle/11.0.26",
                    "product": {
                      "name": "vers:oracle/11.0.26",
                      "product_id": "CSAFPID-2699119",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:oracle:java_se:11.0.26:*:*:*:*:*:*:*"
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:oracle/17.0.14",
                    "product": {
                      "name": "vers:oracle/17.0.14",
                      "product_id": "CSAFPID-2699114",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:oracle:java_se:17.0.14:*:*:*:*:*:*:*"
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:oracle/21.0.6",
                    "product": {
                      "name": "vers:oracle/21.0.6",
                      "product_id": "CSAFPID-2699116",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*"
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:oracle/24",
                    "product": {
                      "name": "vers:oracle/24",
                      "product_id": "CSAFPID-2699117",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*"
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:oracle/8u441",
                    "product": {
                      "name": "vers:oracle/8u441",
                      "product_id": "CSAFPID-2698987",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:oracle:java_se:8u441:*:*:*:*:*:*:*"
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:oracle/8u441-perf",
                    "product": {
                      "name": "vers:oracle/8u441-perf",
                      "product_id": "CSAFPID-2699040",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:oracle:java_se:8u441:*:*:*:enterprise_performance:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Oracle Java SE"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:oracle/20.3.17",
                    "product": {
                      "name": "vers:oracle/20.3.17",
                      "product_id": "CSAFPID-2698988",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:oracle:graalvm:20.3.17:*:*:*:enterprise:*:*:*"
                      }
                    }
                  },
                  {
                    "category": "product_version_range",
                    "name": "vers:oracle/21.3.13",
                    "product": {
                      "name": "vers:oracle/21.3.13",
                      "product_id": "CSAFPID-2698986",
                      "product_identification_helper": {
                        "cpe": "cpe:2.3:a:oracle:graalvm:21.3.13:*:*:*:enterprise:*:*:*"
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "Oracle GraalVM Enterprise Edition"
              }
            ],
            "category": "product_family",
            "name": "Oracle Java SE"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/11.0.26",
                "product": {
                  "name": "vers:unknown/11.0.26",
                  "product_id": "CSAFPID-2726951",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:11.0.26"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.0.14",
                "product": {
                  "name": "vers:unknown/17.0.14",
                  "product_id": "CSAFPID-2726953",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:17.0.14"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/21.0.6",
                "product": {
                  "name": "vers:unknown/21.0.6",
                  "product_id": "CSAFPID-2726950",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:21.0.6"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/24",
                "product": {
                  "name": "vers:unknown/24",
                  "product_id": "CSAFPID-2726955",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:24"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/8u441",
                "product": {
                  "name": "vers:unknown/8u441",
                  "product_id": "CSAFPID-2726960",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:8u441"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/8u441-perf",
                "product": {
                  "name": "vers:unknown/8u441-perf",
                  "product_id": "CSAFPID-2726952",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:oracle:java_se:8u441-perf"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Java Se"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:unknown/8u441",
                    "product": {
                      "name": "vers:unknown/8u441",
                      "product_id": "CSAFPID-2698325"
                    }
                  }
                ],
                "category": "product_name",
                "name": "Java Se"
              }
            ],
            "category": "product_family",
            "name": "Oracle"
          }
        ],
        "category": "vendor",
        "name": "Oracle"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.0.14",
                "product": {
                  "name": "vers:unknown/17.0.14",
                  "product_id": "CSAFPID-2698478"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/21.0.6",
                "product": {
                  "name": "vers:unknown/21.0.6",
                  "product_id": "CSAFPID-2698479"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/24",
                "product": {
                  "name": "vers:unknown/24",
                  "product_id": "CSAFPID-2698480"
                }
              }
            ],
            "category": "product_name",
            "name": "Oracle GraalVM for JDK"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/11.0.26",
                "product": {
                  "name": "vers:unknown/11.0.26",
                  "product_id": "CSAFPID-2698474"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/17.0.14",
                "product": {
                  "name": "vers:unknown/17.0.14",
                  "product_id": "CSAFPID-2698475"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/21.0.6",
                "product": {
                  "name": "vers:unknown/21.0.6",
                  "product_id": "CSAFPID-2698476"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/24",
                "product": {
                  "name": "vers:unknown/24",
                  "product_id": "CSAFPID-2698477"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/8u441",
                "product": {
                  "name": "vers:unknown/8u441",
                  "product_id": "CSAFPID-2698472"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/8u441-perf",
                "product": {
                  "name": "vers:unknown/8u441-perf",
                  "product_id": "CSAFPID-2698473"
                }
              }
            ],
            "category": "product_name",
            "name": "Oracle Java SE"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:unknown/20.3.17",
                "product": {
                  "name": "vers:unknown/20.3.17",
                  "product_id": "CSAFPID-2698481"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:unknown/21.3.13",
                "product": {
                  "name": "vers:unknown/21.3.13",
                  "product_id": "CSAFPID-2698482"
                }
              }
            ],
            "category": "product_name",
            "name": "Oracle GraalVM Enterprise Edition"
          }
        ],
        "category": "vendor",
        "name": "Oracle Corporation"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-47606",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "other",
          "text": "Integer Overflow or Wraparound",
          "title": "CWE-190"
        },
        {
          "category": "general",
          "text": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
          "title": "CVSSV4"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2699120",
          "CSAFPID-2699118",
          "CSAFPID-2699115",
          "CSAFPID-2698478",
          "CSAFPID-2698479",
          "CSAFPID-2698480",
          "CSAFPID-2726951",
          "CSAFPID-2726953",
          "CSAFPID-2726950",
          "CSAFPID-2726955",
          "CSAFPID-2726960",
          "CSAFPID-2698325",
          "CSAFPID-2726952",
          "CSAFPID-2699119",
          "CSAFPID-2699114",
          "CSAFPID-2699116",
          "CSAFPID-2699117",
          "CSAFPID-2698987",
          "CSAFPID-2699040",
          "CSAFPID-2698474",
          "CSAFPID-2698475",
          "CSAFPID-2698476",
          "CSAFPID-2698477",
          "CSAFPID-2698472",
          "CSAFPID-2698473",
          "CSAFPID-2698988",
          "CSAFPID-2698986",
          "CSAFPID-2698481",
          "CSAFPID-2698482"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-47606",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-47606.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2699120",
            "CSAFPID-2699118",
            "CSAFPID-2699115",
            "CSAFPID-2698478",
            "CSAFPID-2698479",
            "CSAFPID-2698480",
            "CSAFPID-2726951",
            "CSAFPID-2726953",
            "CSAFPID-2726950",
            "CSAFPID-2726955",
            "CSAFPID-2726960",
            "CSAFPID-2698325",
            "CSAFPID-2726952",
            "CSAFPID-2699119",
            "CSAFPID-2699114",
            "CSAFPID-2699116",
            "CSAFPID-2699117",
            "CSAFPID-2698987",
            "CSAFPID-2699040",
            "CSAFPID-2698474",
            "CSAFPID-2698475",
            "CSAFPID-2698476",
            "CSAFPID-2698477",
            "CSAFPID-2698472",
            "CSAFPID-2698473",
            "CSAFPID-2698988",
            "CSAFPID-2698986",
            "CSAFPID-2698481",
            "CSAFPID-2698482"
          ]
        }
      ],
      "title": "CVE-2024-47606"
    },
    {
      "cve": "CVE-2024-54534",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2699120",
          "CSAFPID-2699118",
          "CSAFPID-2699115",
          "CSAFPID-2698478",
          "CSAFPID-2698479",
          "CSAFPID-2698480",
          "CSAFPID-2726951",
          "CSAFPID-2726953",
          "CSAFPID-2726950",
          "CSAFPID-2726955",
          "CSAFPID-2726960",
          "CSAFPID-2698325",
          "CSAFPID-2726952",
          "CSAFPID-2699119",
          "CSAFPID-2699114",
          "CSAFPID-2699116",
          "CSAFPID-2699117",
          "CSAFPID-2698987",
          "CSAFPID-2699040",
          "CSAFPID-2698474",
          "CSAFPID-2698475",
          "CSAFPID-2698476",
          "CSAFPID-2698477",
          "CSAFPID-2698472",
          "CSAFPID-2698473",
          "CSAFPID-2698988",
          "CSAFPID-2698986",
          "CSAFPID-2698481",
          "CSAFPID-2698482"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2024-54534",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2024/CVE-2024-54534.json"
        }
      ],
      "title": "CVE-2024-54534"
    },
    {
      "cve": "CVE-2025-21587",
      "product_status": {
        "known_affected": [
          "CSAFPID-2699120",
          "CSAFPID-2699118",
          "CSAFPID-2699115",
          "CSAFPID-2698478",
          "CSAFPID-2698479",
          "CSAFPID-2698480",
          "CSAFPID-2726951",
          "CSAFPID-2726953",
          "CSAFPID-2726950",
          "CSAFPID-2726955",
          "CSAFPID-2726960",
          "CSAFPID-2698325",
          "CSAFPID-2726952",
          "CSAFPID-2699119",
          "CSAFPID-2699114",
          "CSAFPID-2699116",
          "CSAFPID-2699117",
          "CSAFPID-2698987",
          "CSAFPID-2699040",
          "CSAFPID-2698474",
          "CSAFPID-2698475",
          "CSAFPID-2698476",
          "CSAFPID-2698477",
          "CSAFPID-2698472",
          "CSAFPID-2698473",
          "CSAFPID-2698988",
          "CSAFPID-2698986",
          "CSAFPID-2698481",
          "CSAFPID-2698482"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-21587",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-21587.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2699120",
            "CSAFPID-2699118",
            "CSAFPID-2699115",
            "CSAFPID-2698478",
            "CSAFPID-2698479",
            "CSAFPID-2698480",
            "CSAFPID-2726951",
            "CSAFPID-2726953",
            "CSAFPID-2726950",
            "CSAFPID-2726955",
            "CSAFPID-2726960",
            "CSAFPID-2698325",
            "CSAFPID-2726952",
            "CSAFPID-2699119",
            "CSAFPID-2699114",
            "CSAFPID-2699116",
            "CSAFPID-2699117",
            "CSAFPID-2698987",
            "CSAFPID-2699040",
            "CSAFPID-2698474",
            "CSAFPID-2698475",
            "CSAFPID-2698476",
            "CSAFPID-2698477",
            "CSAFPID-2698472",
            "CSAFPID-2698473",
            "CSAFPID-2698988",
            "CSAFPID-2698986",
            "CSAFPID-2698481",
            "CSAFPID-2698482"
          ]
        }
      ],
      "title": "CVE-2025-21587"
    },
    {
      "cve": "CVE-2025-23083",
      "cwe": {
        "id": "CWE-863",
        "name": "Incorrect Authorization"
      },
      "notes": [
        {
          "category": "other",
          "text": "Incorrect Authorization",
          "title": "CWE-863"
        },
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2699120",
          "CSAFPID-2699118",
          "CSAFPID-2699115",
          "CSAFPID-2698478",
          "CSAFPID-2698479",
          "CSAFPID-2698480",
          "CSAFPID-2726951",
          "CSAFPID-2726953",
          "CSAFPID-2726950",
          "CSAFPID-2726955",
          "CSAFPID-2726960",
          "CSAFPID-2698325",
          "CSAFPID-2726952",
          "CSAFPID-2699119",
          "CSAFPID-2699114",
          "CSAFPID-2699116",
          "CSAFPID-2699117",
          "CSAFPID-2698987",
          "CSAFPID-2699040",
          "CSAFPID-2698474",
          "CSAFPID-2698475",
          "CSAFPID-2698476",
          "CSAFPID-2698477",
          "CSAFPID-2698472",
          "CSAFPID-2698473",
          "CSAFPID-2698988",
          "CSAFPID-2698986",
          "CSAFPID-2698481",
          "CSAFPID-2698482"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-23083",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-23083.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-2699120",
            "CSAFPID-2699118",
            "CSAFPID-2699115",
            "CSAFPID-2698478",
            "CSAFPID-2698479",
            "CSAFPID-2698480",
            "CSAFPID-2726951",
            "CSAFPID-2726953",
            "CSAFPID-2726950",
            "CSAFPID-2726955",
            "CSAFPID-2726960",
            "CSAFPID-2698325",
            "CSAFPID-2726952",
            "CSAFPID-2699119",
            "CSAFPID-2699114",
            "CSAFPID-2699116",
            "CSAFPID-2699117",
            "CSAFPID-2698987",
            "CSAFPID-2699040",
            "CSAFPID-2698474",
            "CSAFPID-2698475",
            "CSAFPID-2698476",
            "CSAFPID-2698477",
            "CSAFPID-2698472",
            "CSAFPID-2698473",
            "CSAFPID-2698988",
            "CSAFPID-2698986",
            "CSAFPID-2698481",
            "CSAFPID-2698482"
          ]
        }
      ],
      "title": "CVE-2025-23083"
    },
    {
      "cve": "CVE-2025-30691",
      "product_status": {
        "known_affected": [
          "CSAFPID-2699120",
          "CSAFPID-2699118",
          "CSAFPID-2699115",
          "CSAFPID-2698478",
          "CSAFPID-2698479",
          "CSAFPID-2698480",
          "CSAFPID-2726951",
          "CSAFPID-2726953",
          "CSAFPID-2726950",
          "CSAFPID-2726955",
          "CSAFPID-2726960",
          "CSAFPID-2698325",
          "CSAFPID-2726952",
          "CSAFPID-2699119",
          "CSAFPID-2699114",
          "CSAFPID-2699116",
          "CSAFPID-2699117",
          "CSAFPID-2698987",
          "CSAFPID-2699040",
          "CSAFPID-2698474",
          "CSAFPID-2698475",
          "CSAFPID-2698476",
          "CSAFPID-2698477",
          "CSAFPID-2698472",
          "CSAFPID-2698473",
          "CSAFPID-2698988",
          "CSAFPID-2698986",
          "CSAFPID-2698481",
          "CSAFPID-2698482"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30691",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30691.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2699120",
            "CSAFPID-2699118",
            "CSAFPID-2699115",
            "CSAFPID-2698478",
            "CSAFPID-2698479",
            "CSAFPID-2698480",
            "CSAFPID-2726951",
            "CSAFPID-2726953",
            "CSAFPID-2726950",
            "CSAFPID-2726955",
            "CSAFPID-2726960",
            "CSAFPID-2698325",
            "CSAFPID-2726952",
            "CSAFPID-2699119",
            "CSAFPID-2699114",
            "CSAFPID-2699116",
            "CSAFPID-2699117",
            "CSAFPID-2698987",
            "CSAFPID-2699040",
            "CSAFPID-2698474",
            "CSAFPID-2698475",
            "CSAFPID-2698476",
            "CSAFPID-2698477",
            "CSAFPID-2698472",
            "CSAFPID-2698473",
            "CSAFPID-2698988",
            "CSAFPID-2698986",
            "CSAFPID-2698481",
            "CSAFPID-2698482"
          ]
        }
      ],
      "title": "CVE-2025-30691"
    },
    {
      "cve": "CVE-2025-30698",
      "product_status": {
        "known_affected": [
          "CSAFPID-2699120",
          "CSAFPID-2699118",
          "CSAFPID-2699115",
          "CSAFPID-2698478",
          "CSAFPID-2698479",
          "CSAFPID-2698480",
          "CSAFPID-2726951",
          "CSAFPID-2726953",
          "CSAFPID-2726950",
          "CSAFPID-2726955",
          "CSAFPID-2726960",
          "CSAFPID-2698325",
          "CSAFPID-2726952",
          "CSAFPID-2699119",
          "CSAFPID-2699114",
          "CSAFPID-2699116",
          "CSAFPID-2699117",
          "CSAFPID-2698987",
          "CSAFPID-2699040",
          "CSAFPID-2698474",
          "CSAFPID-2698475",
          "CSAFPID-2698476",
          "CSAFPID-2698477",
          "CSAFPID-2698472",
          "CSAFPID-2698473",
          "CSAFPID-2698988",
          "CSAFPID-2698986",
          "CSAFPID-2698481",
          "CSAFPID-2698482"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-30698",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-30698.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2699120",
            "CSAFPID-2699118",
            "CSAFPID-2699115",
            "CSAFPID-2698478",
            "CSAFPID-2698479",
            "CSAFPID-2698480",
            "CSAFPID-2726951",
            "CSAFPID-2726953",
            "CSAFPID-2726950",
            "CSAFPID-2726955",
            "CSAFPID-2726960",
            "CSAFPID-2698325",
            "CSAFPID-2726952",
            "CSAFPID-2699119",
            "CSAFPID-2699114",
            "CSAFPID-2699116",
            "CSAFPID-2699117",
            "CSAFPID-2698987",
            "CSAFPID-2699040",
            "CSAFPID-2698474",
            "CSAFPID-2698475",
            "CSAFPID-2698476",
            "CSAFPID-2698477",
            "CSAFPID-2698472",
            "CSAFPID-2698473",
            "CSAFPID-2698988",
            "CSAFPID-2698986",
            "CSAFPID-2698481",
            "CSAFPID-2698482"
          ]
        }
      ],
      "title": "CVE-2025-30698"
    }
  ]
}

CVE-2025-21587 (GCVE-0-2025-21587)

Vulnerability from cvelistv5

Published

2025-04-15 20:30

Modified

2025-04-17 03:55

Severity ?

7.4 (High) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data.

Summary

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition:20.3.17 and 21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).

References

►

URL

Tags

https://www.oracle.com/security-alerts/cpuapr2025.html

vendor-advisory

Impacted products

Vendor

Product

Version

►

Oracle Corporation

Oracle Java SE

Version: 8u441
Version: 8u441-perf
Version: 11.0.26
Version: 17.0.14
Version: 21.0.6
Version: 24

	Oracle Corporation	Oracle GraalVM for JDK	Version: 17.0.14 Version: 21.0.6 Version: 24
	Oracle Corporation	Oracle GraalVM Enterprise Edition	Version: 20.3.17 Version: 21.3.13

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-21587",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-16T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-17T03:55:40.045Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Oracle Java SE",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "8u441"
            },
            {
              "status": "affected",
              "version": "8u441-perf"
            },
            {
              "status": "affected",
              "version": "11.0.26"
            },
            {
              "status": "affected",
              "version": "17.0.14"
            },
            {
              "status": "affected",
              "version": "21.0.6"
            },
            {
              "status": "affected",
              "version": "24"
            }
          ]
        },
        {
          "product": "Oracle GraalVM for JDK",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "17.0.14"
            },
            {
              "status": "affected",
              "version": "21.0.6"
            },
            {
              "status": "affected",
              "version": "24"
            }
          ]
        },
        {
          "product": "Oracle GraalVM Enterprise Edition",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "20.3.17"
            },
            {
              "status": "affected",
              "version": "21.3.13"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:8u441:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:8u441:*:*:*:enterprise_performance:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:11.0.26:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:17.0.14:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.14:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.6:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:24:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:graalvm:20.3.17:*:*:*:enterprise:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:graalvm:21.3.13:*:*:*:enterprise:*:*:*",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition:20.3.17 and  21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-04-15T20:30:58.033Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2025.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2025-21587",
    "datePublished": "2025-04-15T20:30:58.033Z",
    "dateReserved": "2024-12-24T23:18:54.787Z",
    "dateUpdated": "2025-04-17T03:55:40.045Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-30698 (GCVE-0-2025-30698)

Vulnerability from cvelistv5

Published

2025-04-15 20:31

Modified

2025-04-16 15:40

Severity ?

5.6 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.

Summary

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition: 20.3.17 and 21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).

References

►

URL

Tags

https://www.oracle.com/security-alerts/cpuapr2025.html

vendor-advisory

Impacted products

Vendor

Product

Version

►

Oracle Corporation

Oracle Java SE

Version: 8u441
Version: 8u441-perf
Version: 11.0.26
Version: 17.0.14
Version: 21.0.6
Version: 24

	Oracle Corporation	Oracle GraalVM for JDK	Version: 17.0.14 Version: 21.0.6 Version: 24
	Oracle Corporation	Oracle GraalVM Enterprise Edition	Version: 20.3.17 Version: 21.3.13

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-30698",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-16T14:13:36.918077Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-16T15:40:23.285Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Oracle Java SE",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "8u441"
            },
            {
              "status": "affected",
              "version": "8u441-perf"
            },
            {
              "status": "affected",
              "version": "11.0.26"
            },
            {
              "status": "affected",
              "version": "17.0.14"
            },
            {
              "status": "affected",
              "version": "21.0.6"
            },
            {
              "status": "affected",
              "version": "24"
            }
          ]
        },
        {
          "product": "Oracle GraalVM for JDK",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "17.0.14"
            },
            {
              "status": "affected",
              "version": "21.0.6"
            },
            {
              "status": "affected",
              "version": "24"
            }
          ]
        },
        {
          "product": "Oracle GraalVM Enterprise Edition",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "20.3.17"
            },
            {
              "status": "affected",
              "version": "21.3.13"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:8u441:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:8u441:*:*:*:enterprise_performance:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:11.0.26:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:17.0.14:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:17.0.14:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:21.0.6:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:graalvm_for_jdk:24:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:graalvm:20.3.17:*:*:*:enterprise:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:graalvm:21.3.13:*:*:*:enterprise:*:*:*",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition: 20.3.17 and  21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.6 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-04-15T20:31:05.719Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2025.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2025-30698",
    "datePublished": "2025-04-15T20:31:05.719Z",
    "dateReserved": "2025-03-25T20:11:18.263Z",
    "dateUpdated": "2025-04-16T15:40:23.285Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-54534 (GCVE-0-2024-54534)

Vulnerability from cvelistv5

Published

2024-12-11 22:58

Modified

2025-04-19 00:11

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Processing maliciously crafted web content may lead to memory corruption

Summary

The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption.

References

►

URL

Tags

	https://support.apple.com/en-us/121844
	https://support.apple.com/en-us/121845
	https://support.apple.com/en-us/121839
	https://support.apple.com/en-us/121843
	https://support.apple.com/en-us/121837
	https://support.apple.com/en-us/121846

Impacted products

Vendor

Product

Version

►

Apple

tvOS

Version: unspecified < 18.2

Apple	visionOS	Version: unspecified < 2.2
Apple	macOS	Version: unspecified < 15.2
Apple	watchOS	Version: unspecified < 11.2
Apple	iOS and iPadOS	Version: unspecified < 18.2
Apple	Safari	Version: unspecified < 18.2

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-54534",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-20T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-21T04:56:02.918Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-04-19T00:11:06.867Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250418-0002/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "tvOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "visionOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "2.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "macOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "15.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "watchOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "11.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "iOS and iPadOS",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Safari",
          "vendor": "Apple",
          "versions": [
            {
              "lessThan": "18.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, Safari 18.2, iOS 18.2 and iPadOS 18.2. Processing maliciously crafted web content may lead to memory corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Processing maliciously crafted web content may lead to memory corruption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T22:58:39.974Z",
        "orgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
        "shortName": "apple"
      },
      "references": [
        {
          "url": "https://support.apple.com/en-us/121844"
        },
        {
          "url": "https://support.apple.com/en-us/121845"
        },
        {
          "url": "https://support.apple.com/en-us/121839"
        },
        {
          "url": "https://support.apple.com/en-us/121843"
        },
        {
          "url": "https://support.apple.com/en-us/121837"
        },
        {
          "url": "https://support.apple.com/en-us/121846"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "286789f9-fbc2-4510-9f9a-43facdede74c",
    "assignerShortName": "apple",
    "cveId": "CVE-2024-54534",
    "datePublished": "2024-12-11T22:58:39.974Z",
    "dateReserved": "2024-12-03T22:50:35.511Z",
    "dateUpdated": "2025-04-19T00:11:06.867Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-30691 (GCVE-0-2025-30691)

Vulnerability from cvelistv5

Published

2025-04-15 20:31

Modified

2025-04-19 00:11

Severity ?

4.8 (Medium) - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

CWE

Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as unauthorized read access to a subset of Oracle Java SE accessible data.

Summary

Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).

References

►

URL

Tags

https://www.oracle.com/security-alerts/cpuapr2025.html

vendor-advisory

Impacted products

	Vendor	Product	Version
	Oracle Corporation	Oracle Java SE	Version: 21.0.6 Version: 24

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-30691",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-16T14:24:18.373918Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-16T15:42:34.656Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-04-19T00:11:10.891Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250418-0004/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Oracle Java SE",
          "vendor": "Oracle Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "21.0.6"
            },
            {
              "status": "affected",
              "version": "24"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:21.0.6:*:*:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:oracle:java_se:24:*:*:*:*:*:*:*",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en-US",
          "value": "Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and  24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data.",
              "lang": "en-US"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-04-15T20:31:03.084Z",
        "orgId": "43595867-4340-4103-b7a2-9a5208d29a85",
        "shortName": "oracle"
      },
      "references": [
        {
          "name": "Oracle Advisory",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.oracle.com/security-alerts/cpuapr2025.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "43595867-4340-4103-b7a2-9a5208d29a85",
    "assignerShortName": "oracle",
    "cveId": "CVE-2025-30691",
    "datePublished": "2025-04-15T20:31:03.084Z",
    "dateReserved": "2025-03-25T20:11:18.262Z",
    "dateUpdated": "2025-04-19T00:11:10.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-23083 (GCVE-0-2025-23083)

Vulnerability from cvelistv5

Published

2025-01-22 01:11

Modified

2025-07-22 15:23

Severity ?

7.7 (High) - CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Summary

With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. This vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23.

References

►

URL

Tags

https://nodejs.org/en/blog/vulnerability/january-2025-security-releases

Impacted products

	Vendor	Product	Version
	NodeJS	Node	Version: 4.0 ≤ Version: 5.0 ≤ Version: 6.0 ≤ Version: 7.0 ≤ Version: 8.0 ≤ Version: 9.0 ≤ Version: 10.0 ≤ Version: 11.0 ≤ Version: 12.0 ≤ Version: 13.0 ≤ Version: 14.0 ≤ Version: 15.0 ≤ Version: 16.0 ≤ Version: 17.0 ≤ Version: 19.0 ≤ Version: 20.0 ≤ Version: 21.0 ≤ Version: 22.0 ≤ Version: 23.0 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-23083",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-28T04:55:27.327533Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-284",
                "description": "CWE-284 Improper Access Control",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-06T14:09:06.805Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-07-22T15:23:52.842Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://security.netapp.com/advisory/ntap-20250228-0008/"
          },
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2025-23083-detect-nodejs-vulnerability"
          },
          {
            "url": "https://www.vicarius.io/vsociety/posts/cve-2025-23083-mitigate-nodejs-vulnerability"
          }
        ],
        "title": "CVE Program Container",
        "x_generator": {
          "engine": "ADPogram 0.0.1"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Node",
          "vendor": "NodeJS",
          "versions": [
            {
              "lessThan": "4.*",
              "status": "affected",
              "version": "4.0",
              "versionType": "semver"
            },
            {
              "lessThan": "5.*",
              "status": "affected",
              "version": "5.0",
              "versionType": "semver"
            },
            {
              "lessThan": "6.*",
              "status": "affected",
              "version": "6.0",
              "versionType": "semver"
            },
            {
              "lessThan": "7.*",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            },
            {
              "lessThan": "8.*",
              "status": "affected",
              "version": "8.0",
              "versionType": "semver"
            },
            {
              "lessThan": "9.*",
              "status": "affected",
              "version": "9.0",
              "versionType": "semver"
            },
            {
              "lessThan": "10.*",
              "status": "affected",
              "version": "10.0",
              "versionType": "semver"
            },
            {
              "lessThan": "11.*",
              "status": "affected",
              "version": "11.0",
              "versionType": "semver"
            },
            {
              "lessThan": "12.*",
              "status": "affected",
              "version": "12.0",
              "versionType": "semver"
            },
            {
              "lessThan": "13.*",
              "status": "affected",
              "version": "13.0",
              "versionType": "semver"
            },
            {
              "lessThan": "14.*",
              "status": "affected",
              "version": "14.0",
              "versionType": "semver"
            },
            {
              "lessThan": "15.*",
              "status": "affected",
              "version": "15.0",
              "versionType": "semver"
            },
            {
              "lessThan": "16.*",
              "status": "affected",
              "version": "16.0",
              "versionType": "semver"
            },
            {
              "lessThan": "17.*",
              "status": "affected",
              "version": "17.0",
              "versionType": "semver"
            },
            {
              "lessThan": "19.*",
              "status": "affected",
              "version": "19.0",
              "versionType": "semver"
            },
            {
              "lessThan": "20.18.2",
              "status": "affected",
              "version": "20.0",
              "versionType": "semver"
            },
            {
              "lessThan": "21.*",
              "status": "affected",
              "version": "21.0",
              "versionType": "semver"
            },
            {
              "lessThan": "22.13.1",
              "status": "affected",
              "version": "22.0",
              "versionType": "semver"
            },
            {
              "lessThan": "23.6.1",
              "status": "affected",
              "version": "23.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This is not limited only to workers but also exposes internal workers, where an instance of them can be fetched, and its constructor can be grabbed and reinstated for malicious usage. \r\n\r\nThis vulnerability affects Permission Model users (--permission) on Node.js v20, v22, and v23."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.0"
          }
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-04-30T22:25:22.434Z",
        "orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
        "shortName": "hackerone"
      },
      "references": [
        {
          "url": "https://nodejs.org/en/blog/vulnerability/january-2025-security-releases"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
    "assignerShortName": "hackerone",
    "cveId": "CVE-2025-23083",
    "datePublished": "2025-01-22T01:11:30.802Z",
    "dateReserved": "2025-01-10T19:05:52.771Z",
    "dateUpdated": "2025-07-22T15:23:52.842Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-47606 (GCVE-0-2024-47606)

Vulnerability from cvelistv5

Published

2024-12-11 19:12

Modified

2025-07-24 03:55

Severity ?

8.6 (High) - CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-190 - Integer Overflow or Wraparound

Summary

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended value when cast to an unsigned integer. This 32-bit negative value is then cast to a 64-bit unsigned integer (0xfffffffffffffffa) in a subsequent call to gst_buffer_new_and_alloc. The function gst_buffer_new_allocate then attempts to allocate memory, eventually calling _sysmem_new_block. The function _sysmem_new_block adds alignment and header size to the (unsigned) size, causing the overflow of the 'slice_size' variable. As a result, only 0x89 bytes are allocated, despite the large input size. When the following memcpy call occurs in gst_buffer_fill, the data from the input file will overwrite the content of the GstMapInfo info structure. Finally, during the call to gst_memory_unmap, the overwritten memory may cause a function pointer hijack, as the mem->allocator->mem_unmap_full function is called with a corrupted pointer. This function pointer overwrite could allow an attacker to alter the execution flow of the program, leading to arbitrary code execution. This vulnerability is fixed in 1.24.10.

References

►

URL

Tags

	https://securitylab.github.com/advisories/GHSL-2024-166_Gstreamer/	x_refsource_CONFIRM
	https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032.patch	x_refsource_MISC
	https://gstreamer.freedesktop.org/security/sa-2024-0014.html	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	gstreamer	gstreamer	Version: < 1.24.10

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-47606",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-07-23T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-24T03:55:27.489Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-04-19T00:11:05.863Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00016.html"
          },
          {
            "url": "https://security.netapp.com/advisory/ntap-20250418-0003/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "gstreamer",
          "vendor": "gstreamer",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 1.24.10"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in the function qtdemux_parse_theora_extension within qtdemux.c. The vulnerability occurs due to an underflow of the gint size variable, which causes size to hold a large unintended value when cast to an unsigned integer. This 32-bit negative value is then cast to a 64-bit unsigned integer (0xfffffffffffffffa) in a subsequent call to gst_buffer_new_and_alloc. The function gst_buffer_new_allocate then attempts to allocate memory, eventually calling _sysmem_new_block. The function _sysmem_new_block adds alignment and header size to the (unsigned) size, causing the overflow of the \u0027slice_size\u0027 variable. As a result, only 0x89 bytes are allocated, despite the large input size. When the following memcpy call occurs in gst_buffer_fill, the data from the input file will overwrite the content of the GstMapInfo info structure. Finally, during the call to gst_memory_unmap, the overwritten memory may cause a function pointer hijack, as the mem-\u003eallocator-\u003emem_unmap_full function is called with a corrupted pointer. This function pointer overwrite could allow an attacker to alter the execution flow of the program, leading to arbitrary code execution. This vulnerability is fixed in 1.24.10."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190: Integer Overflow or Wraparound",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-11T19:12:40.186Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://securitylab.github.com/advisories/GHSL-2024-166_Gstreamer/",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://securitylab.github.com/advisories/GHSL-2024-166_Gstreamer/"
        },
        {
          "name": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032.patch",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/8032.patch"
        },
        {
          "name": "https://gstreamer.freedesktop.org/security/sa-2024-0014.html",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://gstreamer.freedesktop.org/security/sa-2024-0014.html"
        }
      ],
      "source": {
        "advisory": "GHSA-j7pq-xcp8-8qxx",
        "discovery": "UNKNOWN"
      },
      "title": "GHSL-2024-166: GStreamer Integer overflows in MP4/MOV demuxer and memory allocator that can lead to out-of-bounds writes"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2024-47606",
    "datePublished": "2024-12-11T19:12:40.186Z",
    "dateReserved": "2024-09-27T20:37:22.119Z",
    "dateUpdated": "2025-07-24T03:55:27.489Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

ncsc-2025-0130

Vulnerability from csaf_ncscnl

CVE-2025-21587 (GCVE-0-2025-21587)

Vulnerability from cvelistv5

CVE-2025-30698 (GCVE-0-2025-30698)

Vulnerability from cvelistv5

CVE-2024-54534 (GCVE-0-2024-54534)

Vulnerability from cvelistv5

CVE-2025-30691 (GCVE-0-2025-30691)

Vulnerability from cvelistv5

CVE-2025-23083 (GCVE-0-2025-23083)

Vulnerability from cvelistv5

CVE-2024-47606 (GCVE-0-2024-47606)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature