CVE-2021-25832

🗓️ 01 Mar 2021 15:08:57Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 38 Views

Heap buffer overflow vulnerability in BMP image processing in ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0 allows remote code executio

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-25832	1 Mar 202118:43	–	circl
CNNVD	ONLYOFFICE Document Server 缓冲区错误漏洞	1 Mar 202100:00	–	cnnvd
CNVD	ONLYOFFICE Document Server Buffer Overflow Vulnerability	2 Mar 202100:00	–	cnvd
Cvelist	CVE-2021-25832	1 Mar 202115:08	–	cvelist
EUVD	EUVD-2021-12715	7 Oct 202500:30	–	euvd
NVD	CVE-2021-25832	1 Mar 202116:15	–	nvd
OSV	CVE-2021-25832	1 Mar 202116:15	–	osv
Prion	Heap overflow	1 Mar 202116:15	–	prion
RedhatCVE	CVE-2021-25832	22 May 202521:37	–	redhatcve

NVD

Node

Source	Link
github	www.github.com/ONLYOFFICE/core/blob/v6.0.1.15/DesktopEditor/cximage/CxImage/ximabmp.cpp
github	www.github.com/ONLYOFFICE/core/blob/v6.0.1.15/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp
github	www.github.com/ONLYOFFICE/core/blob/v6.0.1.15/DesktopEditor/cximage/CxImage/ximabmp.cpp
github	www.github.com/ONLYOFFICE/core/blob/v6.0.1.15/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp
github	www.github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25832
github	www.github.com/ONLYOFFICE/DocumentServer
github	www.github.com/ONLYOFFICE/core

21 Nov 2024 05:55Current

9.9High risk

Vulners AI Score9.9

CVSS 27.5

CVSS 3.19.8

EPSS0.06955