CVE-2025-5031

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-5031
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5031.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-5031
Aliases
Downstream
Related
Published
2025-05-21T17:00:06.316Z
Modified
2026-07-15T01:49:01.144206704Z
Severity
  • 2.3 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
Summary
Ackites KillWxapkg wxapkg File Decompression resource consumption
Details

A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the component wxapkg File Decompression Handler. The manipulation leads to resource consumption. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/5xxx/CVE-2025-5031.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-400",
        "CWE-404"
    ]
}
References

Affected packages

Git / github.com/ackites/killwxapkg

Affected ranges

Type
GIT
Repo
https://github.com/ackites/killwxapkg
Events
Introduced
d9293bd44b7ab232b747492a10dd339e83be4d9d
Last affected
eb2d734e449d8b4affe724238eb84e1cfbcc173d
Database specific 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "2.4.0"
        },
        {
            "last_affected": "2.4.0"
        },
        {
            "introduced": "2.4.1"
        },
        {
            "last_affected": "2.4.1"
        }
    ]
}

Affected versions

2.*
2.4.0
2.4.1
v2.*
v2.4.0
v2.4.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-5031.json"