CVE-2025-29364CWE-121

CVE-2025-29364

Medium · published August 28, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
31.0
In the wild
Unconfirmed
What it is

spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in the READ_SYSCALL and WRITE_SYSCALL system calls. The application verifies the legitimacy of the starting and ending addresses for memory read/write operations. By configuring the starting and ending addresses for memory read/write to point to distinct memory segments within the virtual machine, it is possible to circumvent these checks.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00382 · 31.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-08-28T20:15Z
Affected products (1)
ProductVersionsFixed in
spimsimulator/spim≤ 9.1.24—
References (2)
https://gist.github.com/Giles-one/a398e3da21ea9567970c6f0de543c3b3 · [email protected]https://github.com/Giles-one/spimsimulatorEscape?tab=readme-ov-file#bug2-bypass-check-in-read_syscall-and-write_syscall-leading-to-out-of-bounds-readwrite · [email protected]
EPSS history
Timeline
  • 28 AUG 00:00Z
    spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in the READ_SYSCALL and WRITE_SYSCALL system calls
    cvelistv5