CVE Catalog

CVE-2025-45663

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.37%

31th percentile - higher than 31% of all known CVEs

Summary

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.

Risk Assessment

This may lead to application crashes or potential information disclosure, disrupting web browsing.

Recommendation

Update NetSurf to a patched version or avoid processing untrusted pages until the update is applied.

Other vulnerabilities in NetSurf

Original NVD description (English source)

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS