CVE-2025-53814

HighCVSS 7.8

Published: 28/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

25th percentile - higher than 25% of all known CVEs

Summary

A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .xml file can lead to heap-based memory corruption.

Risk Assessment

Opening a malicious .xml file by a user could lead to memory corruption and potentially arbitrary code execution in the context of the application.

Recommendation

Update Fade In to a version containing the fix. Do not open .xml files from untrusted sources.

Other vulnerabilities in Fade In

CVE-2025-53855High
An out-of-bounds write vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .fadein file can lead to an out-of-bounds write.

Original NVD description (English source)

A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .xml file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS