CVE-2025-15564

LOW

mapnik < 4.2.0 - Divide By Zero in mapnik::detail::mod<...>::operator

Title source: llm

Description

A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

References (6)

Core 6

Core References

Permissions Required, VDB Entry vdb-entry technical-description

https://vuldb.com/?id.344502

Permissions Required, VDB Entry signature permissions-required

https://vuldb.com/?ctiid.344502

Permissions Required, VDB Entry third-party-advisory

https://vuldb.com/?submit.743386

Issue Tracking issue-tracking

https://github.com/mapnik/mapnik/issues/4545

Various Sources exploit

https://github.com/oneafter/1219/blob/main/repro

View Writeup ZIP pw:eip

Various Sources product

https://github.com/mapnik/mapnik/

Scores

CVSS v3 3.3

EPSS 0.0020

EPSS Percentile 10.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-369 CWE-404

Status published

Products (1)

mapnik/mapnik < 4.2.0

Published Feb 07, 2026

Tracked Since Feb 18, 2026