CVE-2025-15533
Description
A flaw was found in raylib. A local user could exploit a heap-based buffer overflow vulnerability by manipulating data within the GenImageFontAtlas function. This could lead to information disclosure, data corruption, or denial of service.
Statement
This vulnerability is rated Moderate for Red Hat. A heap-based buffer overflow in the GenImageFontAtlas function of raylib can be exploited locally. This affects Red Hat Community Projects, specifically raylib in Fedora 42 and 43, where a local attacker could potentially cause a denial of service or achieve limited impact on confidentiality and integrity.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Understanding the Weakness (CWE)
Integrity
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands
Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
Other
Technical Impact: Unexpected State
Subsequent write operations can produce undefined or unexpected results.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
