CVE-2025-13425

This repository provides a functional proof-of-concept for CVE-2025-13425, a nil pointer dereference vulnerability in osv-scalibr. The exploit involves creating a malicious VMDK file with an empty directory to trigger a segmentation fault during filesystem traversal.

This PoC demonstrates a nil pointer dereference vulnerability (CVE-2025-13425) in Google's osv-scalibr tool when processing VMDK files containing empty directories. The exploit triggers a segmentation fault by leveraging improper handling of virtual filesystems.