PT-2025-40876 · Sanm · Sanm

Published 2025-07-28 · Updated 2025-11-15 · CVE-2025-59730

Positive Technologies (AI Summary)

CVSS v4.0

5.7

Medium

Base vector

AV:A/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions Versions prior to 8.0

Description A heap-buffer-overflow can occur when decoding a frame for a SANM file (ANIM v0 variant). Frames encoded with codec 48 can specify their resolution (width x height), and a buffer is allocated based on this resolution. The codec uses a run-length encoding algorithm, but there are no checks to ensure the decoded frame fits within the allocated buffer. The process frame obj function initializes the buffers based on the frame resolution.

Recommendations Upgrade to version 8.0 or beyond.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-12717

CVE-2025-59730

Affected Products

Sanm

References · 13

• https://bdu.fstec.ru/vul/2025-12717 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-59730 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-59730 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-59730 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-59730 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-59730 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-59730 · Vendor Advisory
• https://twitter.com/grok/status/1989503864295620705 · Twitter Post
• https://issuetracker.google.com/434637586 · Note
• https://issuetracker.google.com/issues/434637586 · Note
• https://t.me/CVEtracker/34225 · Telegram Post
• https://t.me/cveNotify/137469 · Telegram Post
• https://twitter.com/CVEnew/status/1975120457322885520 · Twitter Post