PT-2025-54483 · Wget2+1 · Wget2+1

Published 2025-01-01 · Updated 2026-01-14 · CVE-2025-69195

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU Wget2 (affected versions not specified)

Description A stack-based buffer overflow exists in the filename sanitization logic when processing attacker-controlled URL paths, particularly when filename restriction options are active. A remote attacker can exploit this by providing a specially crafted URL. Upon user interaction with the software, this can lead to memory corruption, potentially causing the application to crash and allowing for further malicious activities. The issue enables arbitrary file writes and, when combined with a related issue, heightens risks like denial-of-service or memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

AZL-73904

CVE-2025-69195

OPENSUSE-SU-2026:10015-1

OPENSUSE-SU-2026:20038-1

Affected Products

Debian

Wget2

References · 26

• https://security-tracker.debian.org/tracker/CVE-2025-69195 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-69195 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20038-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-69195 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-69195 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-73904 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-69195 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10015-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69195 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-69195 · Vendor Advisory
• https://twitter.com/transilienceai/status/2006931265459523851 · Twitter Post
• https://twitter.com/pulsepatchio/status/2009996646550253866 · Twitter Post
• https://suse.com/security/cve/CVE-2025-69195 · Note
• https://twitter.com/CVEnew/status/2009541726382301269 · Twitter Post
• https://twitter.com/nxtgen579255/status/2008376514442916313 · Twitter Post