CVE-2025-4740

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in BeamCtrl Airiana up to 11.0. It has been declared as problematic. This vulnerability affects unknown code of the file coef. The manipulation leads to deserialization. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-20 CWE-502

Affected software

No affected versions have been published.

Timeline

Published: May 16, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-474007.1Cryptographic issue while copying data to a destination buffer without validating its size.CVE-2025-474017.5Transient DOS when processing target power rate tables during channel configuration.CVE-2025-474026.5Transient DOS when processing a received frame with an excessively large authentication information element.CVE-2025-474037.5Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.CVE-2025-474047.8Memory corruption when dynamically changing the size of a previously allocated buffer while its contents are being modified.CVE-2025-474057.8Memory corruption when processing camera sensor input/output control codes with invalid output buffers.CVE-2025-474065.5Information Disclosure while processing IOCTL handler callbacks without verifying buffer size.CVE-2025-474077.0Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.CVE-2025-474087.8Memory corruption when another driver calls an IOCTL with invalid input/output buffer.CVE-2025-47419.8A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been rated as critical. This issue affects some unknown proces CVE-2025-474108.8Apache Geode is vulnerable to CSRF attacks through GET requests to the Management and Monitoring REST API that could allow an attacker who h CVE-2025-474118.1A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that