CVE-2025-53184

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-122CWE-476

Affected software

No affected versions have been published.

Timeline

Published
Jul 7, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-531855.5Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory ImpactCVE-2025-531866.2Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful expCVE-2025-531879.8Due to an issue in configuration, code that was intended for debugging purposes was included in the market release of the ASPECT FW allowingCVE-2025-53199.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Emit Informatics and Communication TecCVE-2025-531928.8** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue aCVE-2025-531934.3Cross-Site Request Forgery (CSRF) vulnerability in Burst Statistics B.V. Burst Statistics burst-statistics allows Cross Site Request ForgeryCVE-2025-531948.5Deserialization of Untrusted Data vulnerability in Crocoblock JetEngine jet-engine allows Code Injection.This issue affects JetEngine: from CVE-2025-531956.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetEngine jet-engine allowsCVE-2025-531966.5Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetEngine jet-engine allows Retrieve Embedded Sensitive Data.TCVE-2025-531974.3Cross-Site Request Forgery (CSRF) vulnerability in cookiebot Cookiebot cookiebot allows Cross Site Request Forgery.This issue affects CookieCVE-2025-531988.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez hCVE-2025-531996.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HT Plugins HT Slider For Elementor ht-
CVE-2025-53184: High severity, CVSS 7.5 | Vulnix