eGkritsis/CVE-2025-61303

eGkritsis/CVE-2025-61303

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
RecordedFuture Triage dynamic analysis engine can fail to record malicious behavior when samples produce very high-volume recursive process forking, causing inconsistent or missing behavioral reports.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-61303↗
9.8 CRITICAL—

Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample recursively spawns a large number of child processes, generating high log volume and exhausting system resources. As a result, key malicious behavior, including PowerShell execution and reverse shell activity, may not be recorded or reported, misleading analysts and compromising the integrity and availability of sandboxed analysis results.