CVE-2025-71264

Summary

Mumble before 1.6.870 is prone to an out-of-bounds array access, which may result in denial of service (client crash).

Affected Software

Weaknesses

• CWE-125: CWE-125 Out-of-bounds Read

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/mumble-voip/mumble/commit/ff2a2332cccb267721553f09c0ded4de880622e0
• https://github.com/mumble-voip/mumble/pull/7032
• https://bugs.debian.org/1129178

• ←Previous
• Next→