CVE-2025-47256 | THREATINT

Description

Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file.

Reserved 2025-05-05 | Published 2025-05-06 | Updated 2025-05-06 | Assigner mitre

MEDIUM: 5.6CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

Problem types

CWE-191 Integer Underflow (Wrap or Wraparound)

Product status

Default status

unknown

Any version

affected

References

github.com/...a6c61c6f8a52458a10/src/loaders/prowizard/pha.c

github.com/GCatt-AS/CVE-2025-47256

github.com/libxmp/libxmp/issues/847

cve.org (CVE-2025-47256)

nvd.nist.gov (CVE-2025-47256)

Download JSON