CVE-2025-35435CWE-369

CISA Thorium download stream divide by zero

Medium · published September 17, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

CISA Thorium accepts a stream split size of zero then divides by this value. A remote, authenticated attacker could cause the service to crash. Fixed in commit 89101a6.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00435 · 36.7th percentile
Weakness
CWE-369 · Divide By Zero
Published
2025-09-17T16:53Z
EPSS history
Timeline
  • 17 SEP 16:53Z
    CISA Thorium download stream divide by zero
    cvelistv5