CVE-2025-29625

HIGH 7.8CVE-2025-29625 · Published 18/04/2025 · updated 17/06/2026

In short

CVE-2025-29625 is a HIGH (CVSS 7.8) vulnerability affecting astrolog (astrolog).
Chance of exploitation in the next 30 days (EPSS): 0.28%, higher than 20.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
astrolog astrolog	`= 7.70`	No fix yet

Description

A buffer overflow vulnerability in Astrolog v7.70 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via an overly long environment variable passed to FileOpen function.

References

blog.reodus.com/posts/cve-2025-29625 · Exploit
CruiserOne/Astrolog · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free