PT-2025-35095 · Spim+1 · Spim+1

Giles-One · Published 2025-08-28 · Updated 2025-08-28 · CVE-2025-29364

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions spimsimulator spim versions prior to 9.1.24

Description spimsimulator spim versions prior to 9.1.24 are susceptible to a buffer overflow in the READ SYSCALL and WRITE SYSCALL system calls. The application’s verification of starting and ending addresses for memory read/write operations can be bypassed by configuring these addresses to point to different memory segments within the virtual machine.

Recommendations Update spimsimulator spim to version 9.1.24 or later.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2025-29364

Affected Products

Debian

Spim

References · 11

• 🔥 https://github.com/Giles-one/spimsimulatorEscape?tab=readme-ov-file#bug2-bypass-check-in-read_syscall-and-write_syscall-leading-to-out-of-bounds-readwrite · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-29364 · Security Note
• https://ubuntu.com/security/CVE-2025-29364 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-29364 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-29364 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-29364 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-29364 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-29364 · Vendor Advisory
• https://twitter.com/CVEnew/status/1961101310125887949 · Twitter Post
• https://t.me/CVEtracker/31134 · Telegram Post
• https://gist.github.com/Giles-one/a398e3da21ea9567970c6f0de543c3b3 · Note