CVE-2025-21486CWE-822

Untrusted Pointer Dereference in DSP Service

High · published June 3, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00097 · 0.7th percentile
Weakness
CWE-822 · Untrusted Pointer Dereference
Published
2025-06-03T05:53Z
EPSS history
Timeline
  • 03 JUN 05:53Z
    Untrusted Pointer Dereference in DSP Service
    cvelistv5