PT-2025-22405 · Unknown · Ackites Killwxapkg

Zznq · Published 2025-05-21 · Updated 2025-05-26 · CVE-2025-5031

Positive Technologies (AI Summary)

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Ackites KillWxapkg versions up to 2.4.1

Description A vulnerability was found in the wxapkg File Decompression Handler component, affecting some unknown processing. This issue leads to resource consumption and can be initiated remotely. The complexity of an attack is rather high, and the exploitation is known to be difficult.

Recommendations For Ackites KillWxapkg versions up to 2.4.1, consider updating to a version later than 2.4.1 to resolve the issue. As a temporary workaround, consider restricting access to the wxapkg File Decompression Handler component to minimize the risk of exploitation.

Exploit

Fix

Resource Exhaustion

Improper Resource Release

Weakness Enumeration

CWE-400

CWE-404

Related Identifiers

CVE-2025-5031

GHSA-PQQP-7CP8-VXVF

GO-2025-3703

OPENSUSE-SU-2025:15159-1

Affected Products

Ackites Killwxapkg

References · 28

• 🔥 https://github.com/Ackites/KillWxapkg/issues/86#issue-3053628148 · Exploit
• https://osv.dev/vulnerability/CVE-2025-5031 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3703 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5031 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15159-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-pqqp-7cp8-vxvf · Vendor Advisory
• https://github.com/Ackites/KillWxapkg/issues/86 · Note
• https://github.com/Ackites/KillWxapkg · Note
• https://suse.com/security/cve/CVE-2025-47284 · Note
• https://suse.com/security/cve/CVE-2025-47291 · Note
• https://vuldb.com/?id.309851 · Note
• https://vuldb.com/?submit.580524 · Note
• https://vuldb.com/?ctiid.309851 · Note
• https://suse.com/security/cve/CVE-2025-48069 · Note
• https://suse.com/security/cve/CVE-2025-2570 · Note