PT-2025-22512 · Sandboxie · Sandboxie

Sgayou · Published 2025-05-22 · Updated 2025-05-22 · CVE-2025-46716

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sandboxie versions 1.3.0 through 1.15.12

Description The issue arises from the failure of Api SetSecureParam to sanitize incoming pointers, implicitly trusting the pointer passed by the user as safe to read from. This allows SetRegValue to read an arbitrary address, potentially a kernel pointer, into a HKLM Security SBIE registry value, which can later be retrieved by API GET SECURE PARAM.

Recommendations For versions prior to 1.15.12, update to version 1.15.12 to resolve the issue. As a temporary workaround, consider restricting access to the Api SetSecureParam and SetRegValue functions until the update is applied.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-46716

GHSA-3984-R877-Q7XP

Affected Products

Sandboxie

References · 6

• 🔥 https://github.com/sandboxie-plus/Sandboxie/security/advisories/GHSA-3984-r877-q7xp · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46716.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-46716 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46716 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1925621866862887229 · Twitter Post
• https://twitter.com/CVEnew/status/1925601154060161390 · Twitter Post