{"id":"CVE-2025-29365","aliases":["DEBIAN-CVE-2025-29365","EUVD-2025-27741","GHSA-789p-mxr8-pv49","UBUNTU-CVE-2025-29365"],"status":"published","title":"spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.","description":"spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.00498,"percentile":0.43132,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120","CWE-125","CWE-274","CWE-787"],"published":"2025-08-22T00:00:00Z","modified":"2026-10-17T12:56:49Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"spim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0+dfsg-6.1","8.0+dfsg-7","8.0+dfsg-8"]},{"source":"osv","ecosystem":"Debian:13","package":"spim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0+dfsg-7","8.0+dfsg-8"]},{"source":"osv","ecosystem":"Debian:14","package":"spim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0+dfsg-7","8.0+dfsg-8"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"spim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0+dfsg-6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"spim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0+dfsg-6.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"spim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0+dfsg-6.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"spim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0+dfsg-6.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"spim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0+dfsg-6.1","8.0+dfsg-6.1build1","8.0+dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"spim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0+dfsg-7","8.0+dfsg-8"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"spim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0+dfsg-8build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"spim","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0+dfsg-8","8.0+dfsg-8build1"]}],"products":[{"vendor":"spimsimulator","product":"spim"}],"references":[{"url":"https://github.com/Giles-one/spimsimulatorEscape?tab=readme-ov-file#bug1-out-of-bounds-write-in-read_input-function","tags":["Exploit","Vendor Advisory","evidence","report"]},{"url":"https://gist.github.com/Giles-one/3a80cd1c7014e50601bd1c0dd9d41663","tags":["Third Party Advisory","advisory","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29365"},{"url":"https://github.com/advisories/GHSA-789p-mxr8-pv49"},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-29365","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-29365","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-29365","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-29365","description":"spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.","status":"published","published":"2025-08-22T00:00:00Z","modified":"2025-08-22T16:13:07.574Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-120","CWE-125","CWE-787","CWE-274"],"updated_at":"2026-11-02T14:32:45.797843Z"}],"euvd":[{"id":"EUVD-2025-27741","description":"spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.","status":"published","published":"2025-08-22T00:00:00Z","modified":"2025-08-22T16:13:07Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:31:54.537077Z"}],"ghsa":[{"id":"GHSA-789p-mxr8-pv49","title":"spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.","description":"spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.","status":"published","published":"2025-08-22T18:31:20Z","modified":"2025-08-22T18:31:21Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T15:03:23.253097Z"}],"nvd":[{"id":"CVE-2025-29365","description":"spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.","status":"published","published":"2025-08-22T16:15:34.797Z","modified":"2026-06-17T09:05:18.987Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-120","CWE-125","CWE-274","CWE-787"],"updated_at":"2026-11-02T14:11:25.261243Z"}],"osv":[{"id":"CVE-2025-29365","description":"spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.","status":"published","published":"2025-08-22T16:15:34.797Z","modified":"2026-04-10T05:24:29.3821Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:47.708311Z"},{"id":"DEBIAN-CVE-2025-29365","description":"spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.","status":"published","published":"2025-08-22T16:15:34.797Z","modified":"2026-09-01T20:05:45.936616334Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:45.870237Z"},{"id":"UBUNTU-CVE-2025-29365","description":"spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.","status":"published","published":"2025-08-22T16:15:00Z","modified":"2026-10-17T12:56:49.639826073Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:55:26.330196Z"}]}}