PT-2025-44178 · Unknown · Monkey'S Audio

Published 2025-10-28 · Updated 2026-03-19 · CVE-2025-61043

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Monkey's Audio version 11.31

Description An out-of-bounds read issue exists in Monkey's Audio version 11.31, specifically within the CAPECharacterHelper::GetUTF16FromUTF8 function. This occurs due to improper handling of the length of input UTF-8 strings, potentially allowing reads beyond memory boundaries. This could lead to a crash or the disclosure of sensitive data. The vulnerable function is CAPECharacterHelper::GetUTF16FromUTF8.

Recommendations Update to a newer version of Monkey's Audio that addresses this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2025-61043

Affected Products

Monkey'S Audio

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-61043 · Security Note
• https://twitter.com/CVEnew/status/1983185727144763450 · Twitter Post
• https://t.me/CVEtracker/35969 · Telegram Post
• https://tzh00203.notion.site/Monkey-s-Audio-Out-of-Bounds-Read-Vulnerability-Report-version-11-31-249b5c52018a80739852d0d9660994c9?source=copy_link · Note
• https://twitter.com/Cezar_H_Linux/status/2034609313080033329 · Twitter Post
• https://twitter.com/threatcluster/status/2034495191948681228 · Twitter Post
• https://t.me/cveNotify/140828 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1983312840246100391 · Twitter Post
• https://twitter.com/Cezar_H_Linux/status/2034587516498583653 · Twitter Post