CVE Catalog

CVE-2025-61845

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.21%

11th percentile - higher than 11% of all known CVEs

Summary

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this to disclose sensitive information stored in memory, requiring user interaction to open a malicious file.

Risk Assessment

Opening a malicious file may leak process memory contents, potentially disclosing sensitive information. The risk affects users opening untrusted files in an application using Format Plugins.

Recommendation

Update Format Plugins to a version later than 1.1.1. Avoid opening files from untrusted sources until patched.

Other vulnerabilities in Format Plugins

See all
Original NVD description (English source)

Format Plugins versions 1.1.1 and earlier are affected by an Out-of-bounds Read vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS