CVE-2025-48769

HighCVSS 8.1/10Last modified Oct 7, 2026

Description

Use After Free vulnerability was discovered in fs/vfs/fs_rename code of the Apache NuttX RTOS, that due recursive implementation and single buffer use by two different pointer variables allowed arbitrary user provided size buffer reallocation and write to the previously freed heap chunk, that in specific cases could cause unintended virtual filesystem rename/move operation results.

This issue affects Apache NuttX RTOS: from 7.20 before 12.11.0.

Users of virtual filesystem based services with write access especially when exposed over the network (i.e. FTP) are affected and recommended to upgrade to version 12.11.0 that fixes the issue.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Jan 1, 2026
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-48774.5There's a vulnerability in the libssh package where when a libssh consumer passes in an unexpectedly large input buffer to ssh_get_fingerpri CVE-2025-48783.6A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function.CVE-2025-487809.8A deserialization of untrusted data vulnerability in the download file function of Soar Cloud HRD Human Resource Management System through v CVE-2025-487817.5An external control of file name or path vulnerability in the download file function of Soar Cloud HRD Human Resource Management System thro CVE-2025-487829.8An unrestricted upload of file with dangerous type vulnerability in the upload file function of Soar Cloud HRD Human Resource Management Sys CVE-2025-487837.5An external control of file name or path vulnerability in the delete file function of Soar Cloud HRD Human Resource Management System throug CVE-2025-487847.5A missing authorization vulnerability in Soar Cloud HRD Human Resource Management System through version 7.3.2025.0408 allows remote attacke CVE-2025-48797.8Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows CVE-2025-487955.6Apache CXF stores large stream based messages as temporary files on the local filesystem. A bug was introduced which means that the entire t CVE-2025-487967.3A flaw was found in GIMP. The GIMP ani_load_image() function is vulnerable to a stack-based overflow. If a user opens.ANI files, GIMP may be CVE-2025-487977.3A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted b CVE-2025-487987.3A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an att