{"id":"CVE-2025-47868","aliases":["EUVD-2025-18391","GHSA-fj9m-mxr3-fvf7"],"status":"published","title":"Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.","description":"Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part of Apache NuttX RTOS repository. This standalone program is optional and neither part of NuttX RTOS nor Applications runtime, but active bdf-converter users may be affected when this tool is exposed to external provided user data data (i.e. publicly available automation).\n\nThis issue affects Apache NuttX: from 6.9 before 12.9.0.\n\nUsers are recommended to upgrade to version 12.9.0, which fixes the issue.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00797,"percentile":0.56967,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-122","CWE-787"],"published":"2025-06-16T11:00:05Z","modified":"2026-10-28T02:31:13Z","products":[{"vendor":"apache","product":"nuttx"},{"vendor":"apache software foundation","product":"apache nuttx rtos: tools/bdf-converter."}],"references":[{"url":"https://github.com/apache/nuttx/pull/16000","tags":["patch","Issue Tracking","Third Party Advisory","fix"]},{"url":"https://lists.apache.org/thread/p4o2lcqgspx3ws1n2p4wmoqbqow1w1pw","tags":["vendor-advisory","Vendor Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2025/06/14/1","tags":["Mailing List","Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47868","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fj9m-mxr3-fvf7"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47868.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-47868","title":"Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.","description":"Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part of Apache NuttX RTOS repository. This standalone program is optional and neither part of NuttX RTOS nor Applications runtime, but active bdf-converter users may be affected when this tool is exposed to external provided user data data (i.e. publicly available automation).\n\nThis issue affects Apache NuttX: from 6.9 before 12.9.0.\n\nUsers are recommended to upgrade to version 12.9.0, which fixes the issue.","status":"published","published":"2025-06-16T11:00:05.293Z","modified":"2025-06-16T16:12:13.504Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-787","CWE-122"],"updated_at":"2026-11-02T14:32:25.982948Z"}],"euvd":[{"id":"EUVD-2025-18391","description":"Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part of Apache NuttX RTOS repository. This standalone program is optional and neither part of NuttX RTOS nor Applications runtime, but active bdf-converter users may be affected when this tool is exposed to external provided user data data (i.e. publicly available automation).\n\nThis issue affects Apache NuttX: from 6.9 before 12.9.0.\n\nUsers are recommended to upgrade to version 12.9.0, which fixes the issue.","status":"published","published":"2025-06-16T11:00:05Z","modified":"2025-06-16T16:12:13Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:32:23.637399Z"}],"ghsa":[{"id":"GHSA-fj9m-mxr3-fvf7","title":"Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered...","description":"Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part of Apache NuttX RTOS repository. This standalone program is optional and neither part of NuttX RTOS nor Applications runtime, but active bdf-converter users may be affected when this tool is exposed to external provided user data data (i.e. publicly available automation).\n\nThis issue affects Apache NuttX: from 6.9 before 12.9.0.\n\nUsers are recommended to upgrade to version 12.9.0, which fixes the issue.","status":"published","published":"2025-06-16T12:30:26Z","modified":"2025-06-16T18:33:27Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:02:44.030349Z"}],"nvd":[{"id":"CVE-2025-47868","description":"Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part of Apache NuttX RTOS repository. This standalone program is optional and neither part of NuttX RTOS nor Applications runtime, but active bdf-converter users may be affected when this tool is exposed to external provided user data data (i.e. publicly available automation).\n\nThis issue affects Apache NuttX: from 6.9 before 12.9.0.\n\nUsers are recommended to upgrade to version 12.9.0, which fixes the issue.","status":"published","published":"2025-06-16T11:15:18.437Z","modified":"2026-06-17T09:28:46.7Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:11:13.247441Z"}],"osv":[{"id":"CVE-2025-47868","title":"Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.","description":"Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part of Apache NuttX RTOS repository. This standalone program is optional and neither part of NuttX RTOS nor Applications runtime, but active bdf-converter users may be affected when this tool is exposed to external provided user data data (i.e. publicly available automation).\n\nThis issue affects Apache NuttX: from 6.9 before 12.9.0.\n\nUsers are recommended to upgrade to version 12.9.0, which fixes the issue.","status":"published","published":"2025-06-16T11:00:05.293Z","modified":"2026-10-28T02:31:13.359518101Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T15:44:49.707645Z"}]}}