CVE-2025-4905

The CVE-2025-4905 issue affects iop-apl-uw basestation3 up to version 3.0.4, specifically the load_qc_pickl function in basestation3/QC.py. The vulnerability stems from deserialization triggered by manipulating the qc_file argument, requiring local access. Public exploit details exist, and the pr...

CVE-2025-4905 iop-apl-uw basestation3 QC.py load_qc_pickl deserialization

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function loadqcpickl of the file basestation3/QC.py. The manipulation of the argument qcfile leads to deserialization. An attack has to be approached locally. The exploit has bee...

CVE-2025-4905 iop-apl-uw basestation3 QC.py load_qc_pickl deserialization

A vulnerability was found in iop-apl-uw basestation3 up to 3.0.4 and classified as problematic. This issue affects the function loadqcpickl of the file basestation3/QC.py. The manipulation of the argument qcfile leads to deserialization. An attack has to be approached locally. The exploit has bee...