CVE-2025-11015CWE-119CWE-762

OGRECave Ogre OgreSTBICodec.cpp encode mismatched memory management routines

Medium · published September 26, 2025

CVSS v4.0
4.8
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. This manipulation causes mismatched memory management routines. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00145 · 4.1th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-762 · Mismatched Memory Management Routines
Published
2025-09-26T13:32Z
EPSS history
Timeline
  • 26 SEP 13:32Z
    OGRECave Ogre OgreSTBICodec.cpp encode mismatched memory management routines
    cvelistv5