CVE-2025-60751

GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode

High · published October 21, 2025

CVSS v3.1
7.5
EPSS
2%
Percentile
83.0
In the wild
Unconfirmed
What it is

⚡ A seemingly innocent input can cause a buffer overflow in GeographicLib 2.5, leading to potential chaos! 🌀 Think of it like a crowded suitcase bursting open because you tried to cram in one too many items without checking the capacity. A small mishap can lead to a colossal mess! An attacker could exploit this vulnerability to manipulate the application's memory, potentially letting them execute arbitrary code. This could lead to unauthorized access, data corruption, or even a full system compromise! Absolutely devastating!

Put simply

Think of it like a crowded suitcase bursting open because you tried to cram in one too many items without checking the capacity. A small mishap can lead to a colossal mess! The buffer overflow in GeographicLib occurs during the GeoConvert DMS::InternalDecode process, where unvalidated input can overwrite adjacent memory, paving the way for an attacker to hijack control of execution.

What to do

An attacker could exploit this vulnerability to manipulate the application's memory, potentially letting them execute arbitrary code. This could lead to unauthorized access, data corruption, or even a full system compromise! Absolutely devastating! Immediately update GeographicLib to version 2.6 to patch this vulnerability. Be sure to review any input handling processes to prevent future occurrences. Don't forget to test your application to ensure everything runs smoothly after the update! You've got this! Just follow these steps, and you'll have security hero status in no time! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.02285 · 83.0th percentile
Published
2025-10-21T00:00Z
EPSS history
Timeline
  • 21 OCT 00:00Z
    GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode
    cvelistv5