CVE-2025-59418CWE-770

BunnyPad Vulnerable to Buffer Overflow When Opening Files of Size 20MB or Greater

Medium · published September 22, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
6.0
In the wild
Unconfirmed
What it is

BunnyPad is a note taking software. Prior to version 11.0.27000.0915, opening files greater than or equal to 20MB causes buffer overflow to occur. This issue has been patched in version 11.0.27000.0915. Users who wish not to upgrade should refrain from opening files larger than 10MB.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00170 · 6.0th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-09-22T18:02Z
EPSS history
Timeline
  • 22 SEP 18:02Z
    BunnyPad Vulnerable to Buffer Overflow When Opening Files of Size 20MB or Greater
    cvelistv5