CVE-2025-0005CWE-190

CVE-2025-0005

High · published November 25, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
2.0
In the wild
Unconfirmed
What it is

⚡ An integer overflow lurking in the XOCL driver could send your system crashing down like a house of cards! 🃏 Think of this vulnerability as a restaurant with a flawed recipe—too many customers (inputs) can overflow the kitchen’s capacity, leading to a chaotic mess instead of a fine dining experience! If exploited, a local attacker could trigger this overflow, resulting in a denial of service that brings your applications to a grinding halt. Imagine your system going dark during a busy hour; absolutely devastating for any operation!

Put simply

Think of this vulnerability as a restaurant with a flawed recipe—too many customers (inputs) can overflow the kitchen’s capacity, leading to a chaotic mess instead of a fine dining experience! This CVE relates to improper input validation in the XOCL driver, which may allow an attacker to create conditions that lead to an integer overflow. When this overflow occurs, it can crash the system or cause unexpected behavior, ultimately resulting in service unavailability.

What to do

If exploited, a local attacker could trigger this overflow, resulting in a denial of service that brings your applications to a grinding halt. Imagine your system going dark during a busy hour; absolutely devastating for any operation! To secure your systems, update the XOCL driver to the latest version where this issue is patched. Additionally, implement rigorous input validation practices to minimize such vulnerabilities in the future. You've got this! Follow these steps, and you'll reinforce your defenses in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00125 · 2.0th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2025-11-25T01:15Z
References (1)
EPSS history
Timeline
  • 24 NOV 19:45Z
    Improper input validation within the XOCL driver may allow a local attacker to generate an integer overflow condition, potentially resulting in crash or denial…
    cvelistv5