wheat MAX

3 exploits Active since Dec 2025
CVE-2025-65409 WRITEUP HIGH WRITEUP
GNU Recutils 1.9 - Denial of Service via Empty Password in Encryption Routine
A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service (DoS) via inputting an empty value as a password.
CVSS 7.5
CVE-2025-65410 WRITEUP MEDIUM WRITEUP
GNU Unrtf 0.21.10 - Denial of Service via Filename Parameter Overflow
A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted input into the filename parameter.
CVSS 6.2
CVE-2025-65411 WRITEUP HIGH WRITEUP
GNU Unrtf 0.21.10 - Denial of Service via Crafted Search Path Parameter
A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the search_path parameter.
CVSS 7.5