DEBIAN-CVE-2025-56814

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2025-56814
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-56814.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2025-56814
Upstream
  • CVE-2025-56814
Withdrawn
2026-07-18T20:00:43Z
Published
2026-06-15T20:16:24Z
Modified
2026-07-18T20:00:43Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A code injection vulnerability in the wxExecute() function of OpenCPN v5.12.0 allows attackers to execute arbitrary code via embedding shell metacharacters.

References

Affected packages

Debian:11 / opencpn

Package

Name
opencpn
Purl
pkg:deb/debian/opencpn?arch=source&distro=bullseye

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.2.4+dfsg-1
5.6.0+dfsg0-1~bpo10+1
5.6.0+dfsg0-1~bpo10+2
5.6.0+dfsg1-1~bpo11+1
5.6.0+dfsg1-1
5.6.2+dfsg-1~bpo10+1
5.6.2+dfsg-1~bpo11+1
5.6.2+dfsg-1~bpo11+2
5.6.2+dfsg-1~bpo11+3
5.6.2+dfsg-1
5.6.2+dfsg-2
5.6.2+dfsg-3
5.8.0+dfsg-1
5.8.2+dfsg-1
5.8.2+dfsg-2
5.8.2+dfsg-3
5.8.4+dfsg-1~bpo11+1
5.8.4+dfsg-1~bpo12+1
5.8.4+dfsg-1
5.8.4+dfsg-1.1
1:5.*
1:5.10.0+dfsg-1
1:5.10.0+dfsg-2
1:5.10.0+dfsg-3
1:5.10.0+dfsg-4
1:5.10.0+dfsg-5~bpo12+1
1:5.10.0+dfsg-5
1:5.10.2+dfsg-1~bpo12+1
1:5.10.2+dfsg-1
1:5.12.2+dfsg-1
1:5.12.2+dfsg-2
1:5.12.2+dfsg-3~bpo12+1
1:5.12.2+dfsg-3~bpo12+2
1:5.12.2+dfsg-3~bpo13+1
1:5.12.2+dfsg-3
1:5.12.4+dfsg-1~bpo12+1
1:5.12.4+dfsg-1~bpo13+1
1:5.12.4+dfsg-1
1:5.12.4+really5.10.2+dfsg-1~bpo12+1
1:5.14.1+dfsg-1
1:5.14.1+dfsg-2
1:5.14.1+dfsg-3~bpo13+1
1:5.14.1+dfsg-3

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-56814.json"

Debian:13 / opencpn

Package

Name
opencpn
Purl
pkg:deb/debian/opencpn?arch=source&distro=trixie

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1:5.*
1:5.10.2+dfsg-1
1:5.12.2+dfsg-1
1:5.12.2+dfsg-2
1:5.12.2+dfsg-3~bpo12+1
1:5.12.2+dfsg-3~bpo12+2
1:5.12.2+dfsg-3~bpo13+1
1:5.12.2+dfsg-3
1:5.12.4+dfsg-1~bpo12+1
1:5.12.4+dfsg-1~bpo13+1
1:5.12.4+dfsg-1
1:5.12.4+really5.10.2+dfsg-1~bpo12+1
1:5.14.1+dfsg-1
1:5.14.1+dfsg-2
1:5.14.1+dfsg-3~bpo13+1
1:5.14.1+dfsg-3

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-56814.json"

Debian:14 / opencpn

Package

Name
opencpn
Purl
pkg:deb/debian/opencpn?arch=source&distro=forky

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

1:5.*
1:5.10.2+dfsg-1
1:5.12.2+dfsg-1
1:5.12.2+dfsg-2
1:5.12.2+dfsg-3~bpo12+1
1:5.12.2+dfsg-3~bpo12+2
1:5.12.2+dfsg-3~bpo13+1
1:5.12.2+dfsg-3
1:5.12.4+dfsg-1~bpo12+1
1:5.12.4+dfsg-1~bpo13+1
1:5.12.4+dfsg-1
1:5.12.4+really5.10.2+dfsg-1~bpo12+1
1:5.14.1+dfsg-1
1:5.14.1+dfsg-2
1:5.14.1+dfsg-3~bpo13+1
1:5.14.1+dfsg-3

Ecosystem specific 

{
    "urgency":  "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2025-56814.json"