AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-42971

MEDIUM · CVSS 4 EPSS 0.14%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-07-08 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 4.0. See the original NVD description below for full technical details.

CVE
CVE-2025-42971
Severity
MEDIUM
CVSS
4
EPSS
0.14%

Original NVD Description

A memory corruption vulnerability exists in SAPCAR allowing an attacker to craft malicious SAPCAR archives. When a high privileged victim extracts this malicious archive, it gets processed by SAPCAR on their system, resulting in out-of-bounds memory read and write. This could lead to file extraction and file overwrite outside the intended directories. This vulnerability has low impact on the confidentiality, integrity and availability of the application.