Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-9301

Good to know:

icon
icon

Date: August 21, 2025

A vulnerability was determined in cmake 4.1.20250725-gb5cce23. This affects the function cmForEachFunctionBlocker::ReplayItems of the file cmForEachCommand.cxx. This manipulation causes reachable assertion. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Patch name: 37e27f71bc356d880c908040cd0cb68fa2c371b8. It is suggested to install a patch to address this issue.

Severity Score

Related Resources (10)

https://vuldb.com/?ctiid.320906
https://vuldb.com/?submit.632369
https://vuldb.com/?id.320906
https://drive.google.com/file/d/1TerUqQB8_lzJTwIBCBmE94zn7n-gOz4f/view?usp=sharing
https://security-tracker.debian.org/tracker/CVE-2025-9301
https://gitlab.kitware.com/cmake/cmake/-/commit/37e27f71bc356d880c908040cd0cb68fa2c371b8
https://gitlab.kitware.com/cmake/cmake/-/issues/27135#note_1691629
https://nvd.nist.gov/vuln/detail/CVE-2025-9301
https://gitlab.kitware.com/cmake/cmake/-/issues/27135
https://www.mend.io/vulnerability-database/CVE-2025-9301

Severity Score

Weakness Type (CWE)

Reachable Assertion

CWE-617

Top Fix

icon

Upgrade Version

Upgrade to version https://github.com/Kitware/CMake.git - null

CVSS v3.1

Base Score:
Attack Vector (AV): LOCAL
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

Do you need more information?

Contact Us