PT-2025-25234 · Cryptx+3 · Cryptx+3

Published 2025-06-11 · Updated 2026-03-26 · CVE-2025-40912

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CryptX for Perl versions prior to 0.065

Description The issue concerns a potential Unicode vulnerability in CryptX for Perl. It is related to a dependency that may be susceptible to malformed Unicode. Specifically, CryptX embeds the tomcrypt library, and the versions of this library in CryptX before version 0.065 may be affected.

Recommendations For versions prior to 0.065, update to version 0.065 or later to resolve the issue. As a temporary workaround, consider restricting the use of Unicode characters in inputs to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-1395

Related Identifiers

CVE-2025-40912

USN-8128-1

Affected Products

Cryptx

Linuxmint

Ubuntu

Tomcrypt Library

References · 20

• https://ubuntu.com/security/CVE-2018-25099 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-40912 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40912 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-40912 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40914 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-40912 · Security Note
• https://osv.dev/vulnerability/CVE-2025-40912 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8128-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-40912 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40912 · Security Note
• https://osv.dev/vulnerability/USN-8128-1 · Vendor Advisory
• https://github.com/libtom/libtomcrypt/issues/507 · Note
• https://t.me/latest_high_impact_cve/2610 · Telegram Post
• https://twitter.com/offseq/status/1932988781885288641 · Twitter Post
• https://twitter.com/threatcluster/status/2037311262950908135 · Twitter Post