CVE-2025-11014

HIGH 7.8CVE-2025-11014 · Published 26/09/2025 · updated 09/10/2026

In short

CVE-2025-11014 is a HIGH (CVSS 7.8) vulnerability affecting ogre (ogre3d).
Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 16.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
ogre ogre3d	`≤ 14.4.1`	No fix yet

Description

A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp of the component Image Handler. The manipulation results in heap-based buffer overflow. The attack is only possible with local access. The exploit has been released to the public and may be exploited.

References

OGRECave/ogre · Exploit
user-attachments/files · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

More vulnerabilities in ogre

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free