CVE-2025-29625

A buffer overflow vulnerability in Astrolog v7.70 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via an overly long environment variable passed to FileOpen function.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.27% chance of exploitation in the next 30 days, 19th percentile

Published

2025-04-18

Proof-of-concept exploits (1)

• https://blog.reodus.com/posts/cve-2025-29625/

References

• CVE Record
• NVD entry

Related

• CVE-2025-2961
• CVE-2025-29632
• CVE-2025-29602
• CVE-2025-29635
• CVE-2025-2960
• CVE-2025-29640