MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

🗓️ 02 Sep 2025 17:12:52Reported by GitHub Advisory DatabaseType

Summary The vulnerability allows any user to overwrite any files available under the account privileges of the running process. Details As part of static analysis, iOS MobSF supports loading and parsing statically linked libraries .a. When parsing...

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2025-58162	31 Aug 202502:35	–	circl
CNNVD	Mobile Security Framework 路径遍历漏洞	2 Sep 202500:00	–	cnnvd
CVE	CVE-2025-58162	2 Sep 202500:46	–	cve
Cvelist	CVE-2025-58162 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction	2 Sep 202500:46	–	cvelist
EUVD	EUVD-2025-26368	3 Oct 202520:07	–	euvd
NVD	CVE-2025-58162	2 Sep 202501:15	–	nvd
OSV	CVE-2025-58162 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction	2 Sep 202500:46	–	osv
OSV	GHSA-9GH8-9R95-3FC3 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction	2 Sep 202517:12	–	osv
Positive Technologies	PT-2025-35522	2 Sep 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-58162	4 Sep 202501:31	–	redhatcve

Vulners

Node

mobsf mobile_security_framework_mobsfRange≤4.4.0pip

Source	Link
github	www.github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-9gh8-9r95-3fc3
github	www.github.com/MobSF/Mobile-Security-Framework-MobSF/commit/7f3bc086c028c1b50889cab8a15f7b59b7abdaf9
github	www.github.com/MobSF/Mobile-Security-Framework-MobSF/releases/tag/v4.4.1
github	www.github.com/advisories/GHSA-9gh8-9r95-3fc3

02 Sep 2025 17:12Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.5

EPSS0.0029

SSVC

CWE-22