CVE-2025-45332

7.5 highEPSS 0.4%

High (7.5) in vkoskiv c-ray. EPSS 0.4% chance of exploitation in the next 30 days.

vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2025-06-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

vkoskiv:c-ray

References

https://gist.github.com/QiuYitai/6ebfa07510828a9464ba7fb948255ed5
https://github.com/vkoskiv/c-ray/issues/119

Check your stack JSON