PT-2026-6921 · Mapnik · Mapnik

Oneafter · Published 2026-02-07 · Updated 2026-02-08 · CVE-2025-15564

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Mapnik versions prior to 4.2.1

Description A flaw exists in Mapnik that relates to a divide by zero error within the mapnik::detail::mod<...>::operator function located in the src/value.cpp file. This issue can be triggered locally. The details of the exploit have been publicly disclosed. The project has been notified of the issue but has not yet responded.

Recommendations Update to a version later than 4.2.0.

Exploit

Fix

Divide By Zero

Improper Resource Release

Weakness Enumeration

CWE-369

CWE-404

Related Identifiers

CVE-2025-15564

Affected Products

Mapnik

References · 15

• 🔥 https://github.com/mapnik/mapnik/issues/4545 · Exploit
• 🔥 https://github.com/oneafter/1219/blob/main/repro · Exploit
• https://cve.org/CVERecord?id=CVE-2025-15564 · Security Note
• https://osv.dev/vulnerability/CVE-2025-15564 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-15564 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-15564 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-15564 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-15564 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-15564 · Vendor Advisory
• https://github.com/mapnik/mapnik · Note
• https://vuldb.com/?ctiid.344502 · Note
• https://twitter.com/CVEnew/status/2020253716574609797 · Twitter Post
• https://t.me/CVEtracker/44052 · Telegram Post
• https://vuldb.com/?id.344502 · Note
• https://vuldb.com/?submit.743386 · Note