CVE-2025-47256

MEDIUM EPSS 15.8%
Published May 6, 20251y ago · Modified Jun 17, 20262w ago
5.6 CVSS 3.1
Medium
Find Similar
Published May 6, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

Libxmp through 4.6.2 has a stack-based buffer overflow in depack_pha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file.

CVSS Details

Base Score
5.6
Exploitability
1.4
Impact
3.7
Vector string
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Attack Vector Local
Attack Complexity High
Privileges Required None
User Interaction None
Scope Changed
Confidentiality Low
Integrity Low
Availability Low

Threat Intelligence

EPSS Exploit Probability
15.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-191

References 3

  • github.com https://github.com/GCatt-AS/CVE-2025-47256
  • github.com https://github.com/libxmp/libxmp/blob/ec22d1c7b93c8f681f8504a6c61c6f8a52458a10/src/loaders/prowizard/pha.c#L35
  • github.com https://github.com/libxmp/libxmp/issues/847

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.