CVE-2025-15504
Last modified
CVE-2025-15504 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parse_binary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parse_binary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.17.2 can resolve this issue. The patch is identified as 81bd5d7ea0c390563f1c4c017c9019d154802978. It is recommended to upgrade the affected component.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Lief-Project | Lief | < 0.17.2 |
References
- https://github.com/lief-project/LIEF/issues/1277Exploit, Issue Tracking, Patch
- https://github.com/lief-project/LIEF/issues/1277#issuecomment-3693859001Exploit, Issue Tracking, Patch
- https://vuldb.com/?ctiid.340375Permissions Required, VDB Entry
- https://vuldb.com/?id.340375Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.733329Exploit, Third Party Advisory, VDB Entry
- https://github.com/lief-project/LIEF/issues/1277Exploit, Issue Tracking, Patch
- https://github.com/lief-project/LIEF/issues/1277#issuecomment-3693859001Exploit, Issue Tracking, Patch
- https://vuldb.com/?submit.733329Exploit, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2025-15504?
How severe is CVE-2025-15504?
How do I fix CVE-2025-15504?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-15499A vulnerability has been found in Sangfor Operation and Main…9.8
- CVE-2025-1550The Keras Model.load_model function permits arbitrary code e…9.8
- CVE-2025-15500A vulnerability was found in Sangfor Operation and Maintenan…9.8
- CVE-2025-15501A vulnerability was determined in Sangfor Operation and Main…9.8
- CVE-2025-15502A vulnerability was identified in Sangfor Operation and Main…9.8
- CVE-2025-15503A security flaw has been discovered in Sangfor Operation and…9.8
- CVE-2025-15505A vulnerability was found in Luxul XWR-600 up to 4.0.1. The …2.4
- CVE-2025-15506A vulnerability was found in AcademySoftwareFoundation OpenC…3.3
- CVE-2025-15507The Magic Import Document Extractor plugin for WordPress is …5.3
- CVE-2025-15508The Magic Import Document Extractor plugin for WordPress is …5.3
- CVE-2025-15509The SmartRemote module has insufficient restrictions on load…4.3
- CVE-2025-1551IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.…6.1
Are you affected by CVE-2025-15504?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST