CVE-2025-9174

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-9174

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9174.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-9174

Published

2025-08-19T23:15:28.873Z

Modified

2026-04-10T05:37:44.777360Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A vulnerability was determined in neurobin shc up to 4.0.3. This vulnerability affects the function make of the file src/shc.c of the component Filename Handler. Executing manipulation can lead to os command injection. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized.

References

Affected packages

Git / github.com/neurobin/shc

Affected ranges

Type

GIT

Repo

https://github.com/neurobin/shc

Events

Introduced

Last affected

7e5b6be461fb29a2e9ada116b00eadcc4d5b9b1b

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.0.3"
        }
    ]
}

Affected versions

3.*

3.9.1

3.9.3a4

3.9.4

3.9.6

3.9.8

4.*

4.0.0

4.0.1

4.0.2

4.0.3

shc-3.*

shc-3.9.4

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9174.json"