CVE-2025-6499

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in vstakhov libucl up to 0.9.2. Affected by this vulnerability is the function ucl_parse_multiline_string of the file src/ucl_parser.c. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119 CWE-122 CWE-787

Affected software

Vendor	Product	Versions
vstakhov	libucl	0.9.0; 0.9.1; 0.9.2

References

https://github.com/user-attachments/files/19825399/libucl_crash.txtExploit
https://github.com/vstakhov/libucl/issues/319Exploit, Issue Tracking
https://vuldb.com/?ctiid.313615Permissions Required, VDB Entry
https://vuldb.com/?id.313615Third Party Advisory, VDB Entry
https://vuldb.com/?submit.601011Third Party Advisory, VDB Entry
https://github.com/vstakhov/libucl/issues/319Exploit, Issue Tracking

Timeline

Published: Jun 23, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-649907.2A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Explorer-TachyonCore-LogoffUs CVE-2025-649917.2A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-PatchInsights-Deploy instruct CVE-2025-649927.2A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-PauseNomadJobQueue inst CVE-2025-649937.2A command injection vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-ConfigMgrConsoleExtensions in CVE-2025-649946.7A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Nomad-SetWorkRate instruct CVE-2025-649956.7A privilege escalation vulnerability was discovered in TeamViewer DEX (former 1E DEX), specifically within the 1E-Exchange-NomadClientHealth CVE-2025-649964.4In Checkmk versions prior to 2.4.0p16, 2.3.0p41, and all versions of 2.2.0 and older, the mk_inotify plugin creates world-readable and writa CVE-2025-649976.5Insufficient permission validation in Checkmk versions prior to 2.4.0p17 and 2.3.0p42 allow low-privileged users to view agent information v CVE-2025-649987.2Exposure of session signing secret in Checkmk <2.4.0p23, <2.3.0p45 and 2.2.0 allows an administrator of a remote site with config sync enabl CVE-2025-649995.4Improper neutralization of input in Checkmk versions 2.4.0 before 2.4.0p22, and 2.3.0 before 2.3.0p43 allows an attacker that can manipulate CVE-2025-65009.8A vulnerability, which was classified as critical, has been found in code-projects Inventory Management System 1.0. Affected by this issue i CVE-2025-650005.3SSH private keys of the "Remote alert handlers (Linux)" rule were exposed in the rule page's HTML source in Checkmk <= 2.4.0p18 and all vers