CVE-2025-6375

LOW EPSS 10.9%
Published Jun 21, 20251y ago · Modified Jun 17, 20261w ago
1.9 CVSS 4.0
Low
Find Similar
Published Jun 21, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability was found in poco up to 1.14.1. It has been rated as problematic. Affected by this issue is the function MultipartInputStream of the file Net/src/MultipartReader.cpp. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 1.14.2 is able to address this issue. The patch is identified as 6f2f85913c191ab9ddfb8fae781f5d66afccf3bf. It is recommended to upgrade the affected component.

CVSS Details

Base Score
1.9
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
10.9% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 2

CWE-404
CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 1

VendorProductVersionRange
pocoprojectpoco* <1.14.2

References 7

  • github.com https://github.com/pocoproject/poco/commit/6f2f85913c191ab9ddfb8fae781f5d66afccf3bf
    Patch
  • github.com https://github.com/pocoproject/poco/issues/4915
    ExploitIssue TrackingPatch
  • github.com https://github.com/pocoproject/poco/releases/tag/poco-1.14.2-release
    Release Notes
  • github.com https://github.com/user-attachments/files/19524599/poco_crash.txt
    Exploit
  • vuldb.com https://vuldb.com/?ctiid.313370
    Permissions RequiredVDB Entry
  • vuldb.com https://vuldb.com/?id.313370
    Third Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/?submit.597446
    Third Party AdvisoryVDB Entry

Remediation

  • github.com https://github.com/pocoproject/poco/commit/6f2f85913c191ab9ddfb8fae781f5d66afccf3bf
    Patch
  • github.com https://github.com/pocoproject/poco/issues/4915
    ExploitIssue TrackingPatch