CVE-2025-35435

CVE-2025-35435 affects CISA Thorium. The vulnerability arises when Thorium accepts a stream split size of zero and then divides by that value, potentially causing a service crash from a remote, authenticated attacker. The fixed version is implemented in commit 89101a6. Multiple connected document...

CVE-2025-35435

CISA Thorium accepts a stream split size of zero then divides by this value. A remote, authenticated attacker could cause the service to crash. Fixed in commit 89101a6...

thorium 安全漏洞

thorium is an extensible file analysis and data generation platform from the individual developer mjcarson. A security vulnerability exists in thorium that stems from accepting a zero-valued stream split size and performing a division operation, which could lead to a remote authenticated attacker...