CVE-2025-29364

MEDIUM 6.5CVE-2025-29364 · Published 28/08/2025 · updated 26/09/2026

In short

CVE-2025-29364 is a MEDIUM (CVSS 6.5) vulnerability affecting spim (spimsimulator).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 32.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
spim spimsimulator	`≤ 9.1.24`	No fix yet

Description

spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in the READ_SYSCALL and WRITE_SYSCALL system calls. The application verifies the legitimacy of the starting and ending addresses for memory read/write operations. By configuring the starting and ending addresses for memory read/write to point to distinct memory segments within the virtual machine, it is possible to circumvent these checks.

References

gist.github.com/Giles-one/a398e3da21ea9567970c6f0de543c3b3 · Third Party Advisory
Giles-one/spimsimulatorEscape · Exploit

More vulnerabilities in spim

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free