CVE-2025-31162 - Vulnerability Details

Link	Providers
https://sourceforge.net/p/mcj/tickets/185/

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function.
Title		fig2dev float point exception
Weaknesses		CWE-369
References		https://sourceforge.net/p/mcj/tickets/185/
Metrics		cvssV3_1 `{'score': 6.6, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-31162", "assignerOrgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "state": "PUBLISHED", "assignerShortName": "redhat-cnalr", "dateReserved": "2025-03-27T02:44:50.787Z", "datePublished": "2025-03-28T18:01:31.662Z", "dateUpdated": "2025-03-28T19:46:25.689Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "packageName": "fig2dev", "product": "fig2dev", "vendor": "xfig", "versions": [{"status": "affected", "version": "3.2.9a"}]}], "datePublic": "2025-01-20T03:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Floating point exception in fig2dev in version 3.2.9a&nbsp;allows an attacker to availability via local input manipulation via&nbsp;get_slope function."}], "value": "Floating point exception in fig2dev in version 3.2.9a\u00a0allows an attacker to availability via local input manipulation via\u00a0get_slope function."}], "impacts": [{"capecId": "CAPEC-153", "descriptions": [{"lang": "en", "value": "CAPEC-153 Input Data Manipulation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-369", "description": "CWE-369", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "shortName": "redhat-cnalr", "dateUpdated": "2025-03-28T18:01:31.662Z"}, "references": [{"url": "https://sourceforge.net/p/mcj/tickets/185/"}], "source": {"discovery": "UNKNOWN"}, "title": "fig2dev float point exception", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-28T19:46:09.262436Z", "id": "CVE-2025-31162", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-28T19:46:25.689Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-31162 (string)

assignerOrgId : 74b3a70d-cca6-4d34-9789-e83b222ae3be (string)

state : PUBLISHED (string)

assignerShortName : redhat-cnalr (string)

dateReserved : 2025-03-27T02:44:50.787Z (string)

datePublished : 2025-03-28T18:01:31.662Z (string)

dateUpdated : 2025-03-28T19:46:25.689Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

packageName : fig2dev (string)

product : fig2dev (string)

vendor : xfig (string)

versions : [ »

0 : { »

status : affected (string)

version : 3.2.9a (string)

}

]

}

]

datePublic : 2025-01-20T03:00:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function. (string)

}

]

value : Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function. (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-153 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-153 Input Data Manipulation (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.6 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-369 (string)

description : CWE-369 (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 74b3a70d-cca6-4d34-9789-e83b222ae3be (string)

shortName : redhat-cnalr (string)

dateUpdated : 2025-03-28T18:01:31.662Z (string)

}

references : [ »

0 : { »

url : https://sourceforge.net/p/mcj/tickets/185/ (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : fig2dev float point exception (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-03-28T19:46:09.262436Z (string)

id : CVE-2025-31162 (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-28T19:46:25.689Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-31162", "assignerOrgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "state": "PUBLISHED", "assignerShortName": "redhat-cnalr", "dateReserved": "2025-03-27T02:44:50.787Z", "datePublished": "2025-03-28T18:01:31.662Z", "dateUpdated": "2025-03-28T19:46:25.689Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "packageName": "fig2dev", "product": "fig2dev", "vendor": "xfig", "versions": [{"status": "affected", "version": "3.2.9a"}]}], "datePublic": "2025-01-20T03:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Floating point exception in fig2dev in version 3.2.9a&nbsp;allows an attacker to availability via local input manipulation via&nbsp;get_slope function."}], "value": "Floating point exception in fig2dev in version 3.2.9a\u00a0allows an attacker to availability via local input manipulation via\u00a0get_slope function."}], "impacts": [{"capecId": "CAPEC-153", "descriptions": [{"lang": "en", "value": "CAPEC-153 Input Data Manipulation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-369", "description": "CWE-369", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "shortName": "redhat-cnalr", "dateUpdated": "2025-03-28T18:01:31.662Z"}, "references": [{"url": "https://sourceforge.net/p/mcj/tickets/185/"}], "source": {"discovery": "UNKNOWN"}, "title": "fig2dev float point exception", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-31162", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-28T19:46:09.262436Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-28T19:46:16.512Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-31162 (string)

assignerOrgId : 74b3a70d-cca6-4d34-9789-e83b222ae3be (string)

state : PUBLISHED (string)

assignerShortName : redhat-cnalr (string)

dateReserved : 2025-03-27T02:44:50.787Z (string)

datePublished : 2025-03-28T18:01:31.662Z (string)

dateUpdated : 2025-03-28T19:46:25.689Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

packageName : fig2dev (string)

product : fig2dev (string)

vendor : xfig (string)

versions : [ »

0 : { »

status : affected (string)

version : 3.2.9a (string)

}

]

}

]

datePublic : 2025-01-20T03:00:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function. (string)

}

]

value : Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function. (string)

}

]

impacts : [ »

0 : { »

capecId : CAPEC-153 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : CAPEC-153 Input Data Manipulation (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.6 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-369 (string)

description : CWE-369 (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 74b3a70d-cca6-4d34-9789-e83b222ae3be (string)

shortName : redhat-cnalr (string)

dateUpdated : 2025-03-28T18:01:31.662Z (string)

}

references : [ »

0 : { »

url : https://sourceforge.net/p/mcj/tickets/185/ (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : fig2dev float point exception (string)

x_generator : { »

engine : Vulnogram 0.2.0 (string)

}

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-31162 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : poc (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-03-28T19:46:09.262436Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-28T19:46:16.512Z (string)

}

]

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Floating point exception in fig2dev in version 3.2.9a\u00a0allows an attacker to availability via local input manipulation via\u00a0get_slope function."}, {"lang": "es", "value": "La excepci\u00f3n de punto flotante en fig2dev en la versi\u00f3n 3.2.9a permite a un atacante obtener disponibilidad mediante la manipulaci\u00f3n de entrada local mediante la funci\u00f3n get_slope."}], "id": "CVE-2025-31162", "lastModified": "2025-04-01T20:26:39.627", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 4.7, "source": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "type": "Secondary"}]}, "published": "2025-03-28T18:15:18.007", "references": [{"source": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "url": "https://sourceforge.net/p/mcj/tickets/185/"}], "sourceIdentifier": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-369"}], "source": "74b3a70d-cca6-4d34-9789-e83b222ae3be", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Floating point exception in fig2dev in version 3.2.9a allows an attacker to availability via local input manipulation via get_slope function. (string)

}

1 : { »

lang : es (string)

value : La excepción de punto flotante en fig2dev en la versión 3.2.9a permite a un atacante obtener disponibilidad mediante la manipulación de entrada local mediante la función get_slope. (string)

}

]

id : CVE-2025-31162 (string)

lastModified : 2025-04-01T20:26:39.627 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.6 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 4.7 (number)

source : 74b3a70d-cca6-4d34-9789-e83b222ae3be (string)

type : Secondary (string)

}

]

}

published : 2025-03-28T18:15:18.007 (string)

references : [ »

0 : { »

source : 74b3a70d-cca6-4d34-9789-e83b222ae3be (string)

url : https://sourceforge.net/p/mcj/tickets/185/ (string)

}

]

sourceIdentifier : 74b3a70d-cca6-4d34-9789-e83b222ae3be (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-369 (string)

}

]

source : 74b3a70d-cca6-4d34-9789-e83b222ae3be (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object