What’s Vulnerable › Vulnerabilities

CVE-2025-45332

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-06-25 · updated 2026-06-17
• Weakness: CWE-476

Description

vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes.

Affected products

• Vkoskiv C-Ray: 1.1

References

• https://gist.github.com/QiuYitai/6ebfa07510828a9464ba7fb948255ed5
• https://github.com/vkoskiv/c-ray/issues/119

Get alerted when CVE-2025-45332 or the next vulnerability affects your stack