CVE-2025-40913

Published July 16th, 2025

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328.

libtom/libtommath

LibTomMath is a free open source portable number theoretic multiple-precision integer library written entirely in C.

GitHub

789