CVE-2025-21447CWE-129

Improper Validation of Array Index in Computer Vision

High · published April 7, 2025

CVSS v3.1

7.8

EPSS

0%

Percentile

1.1

In the wild

Unconfirmed

What it is

Memory corruption may occur while processing device IO control call for session control.

The record

Technical detail

CVSS v3.1: 7.8 · HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00107 · 1.1th percentile
Weakness: CWE-129 · Improper Validation of Array Index
Published: 2025-04-07T10:16Z

EPSS history

Timeline

07 APR 10:16Z
Improper Validation of Array Index in Computer Vision
cvelistv5