CVE-2025-62672

Published: Oct 19, 2025Modified: Jun 17, 2026Deferred

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: MITRE (Secondary)

Description

rplay through 3.3.2 allows attackers to cause a denial of service (SIGSEGV and daemon crash) or possibly have unspecified other impact. This occurs in memcpy in the RPLAY_DATA case in rplay_unpack in librplay/rplay.c, potentially reachable via packet data with no authentication.

Related CWEs

CWE-770

Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References (3)

https://salsa.debian.org/alteholz/rplay

Source: cve@mitre.org

https://web.archive.org/web/20171109100411/http://rplay.doit.org

Source: cve@mitre.org

https://www.openwall.com/lists/oss-security/2025/10/18/4

Source: cve@mitre.org

Timeline

No history available yet.