CVE-2025-49163

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file...

CVE-2025-49163

creationtimestamp| type| source ---|---|--- 2025-06-03 04:40:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqohxkam5s2a...

CVE-2025-49163

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file...

CVE-2025-49163

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file...

CVE-2025-49163

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file...

CVE-2025-49163

Arris VIP1113 devices (with KreaTV SDK) are affected by CVE-2025-49163. The issue allows booting an arbitrary image via a crafted /usr/bin/gunzip file, affecting devices through 2025-05-30. Root cause: manipulation of the gunzip component in the device’s boot flow. Impact as described: arbitrary ...