CVE-2025-4330Suited to automated attack · CISA
Extraction filter bypass for linking outside extraction directory
CVSS score
7.5
EPSS probability
%0.9
Risk score
0.1
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption
Makefile Go / Python
Similar Vulnerabilities
9.4
CVE-2025-4517
Arbitrary writes via tarfile realpath overflow
PS
Patch verifiedEPSS %1
9.1
CVE-2026-6100
Use-after-free in lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile after re-use under memory pressure
PS
Patch verifiedEPSS %1
8.2
CVE-2026-11972
tarfile opened in streaming mode mishandles EOF
PS
Patch verifiedEPSS %1
7.8
CVE-2026-11940
tarfile extraction filter bypass allows escaping the destination directory
PS
Patch verifiedEPSS %1
8.7
CVE-2026-15308
Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations
PS
Patch verifiedEPSS %1
6.9
CVE-2026-7774
tarfile.data_filter path traversal bypass allows writing outside the extraction directory
PS
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-4330"