« Volver al listado

CVE-2025-24336

Estado: AplazadaBaja (3.3)—

SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-24336",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-24336",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-01-31T17:43:37.561152Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "vultures@jpcert.or.jp",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 3.3,
          "attackVector": "LOCAL",
          "baseSeverity": "LOW",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
          "integrityImpact": "NONE",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "vultures@jpcert.or.jp",
      "affectedData": [
        {
          "vendor": "General Incorporated Association OCF",
          "product": "SXF Common Library",
          "versions": [
            {
              "status": "affected",
              "version": "all versions"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-01-31T00:15:20.607",
  "references": [
    {
      "url": "https://jvn.jp/en/jp/JVN23839833/",
      "source": "vultures@jpcert.or.jp"
    },
    {
      "url": "https://ocf.or.jp/about/download/sxflibrary",
      "source": "vultures@jpcert.or.jp"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "vultures@jpcert.or.jp",
      "description": [
        {
          "lang": "en",
          "value": "CWE-237"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed."
    },
    {
      "lang": "es",
      "value": "SXF Common Library gestiona los datos de entrada de forma incorrecta. Si un producto que utiliza la librería lee un archivo manipulado, el producto puede bloquearse."
    }
  ],
  "lastModified": "2026-06-17T08:58:35.243",
  "sourceIdentifier": "vultures@jpcert.or.jp"
}