CVE-2025-15537
Description
A flaw was found in Mapnik. A local attacker can exploit a heap-based buffer overflow vulnerability by manipulating the mapnik::dbf_file::string_value function in plugins/input/shape/dbfile.cpp. This vulnerability can lead to information disclosure, data integrity issues, and denial of service. A public exploit for this issue has been disclosed.
Statement
This vulnerability is rated Moderate for Red Hat because it requires local access to trigger a heap-based buffer overflow in the Mapnik library when processing specially crafted shape files. Exploitation requires an attacker to have local user access to a system utilizing Mapnik to process untrusted data.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
