{"vulnerability": "cve-2025-4817", "sightings": [{"uuid": "d0fab469-d922-49c3-8b49-6a4b86ccb18f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48172", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:20.000000Z"}, {"uuid": "908b93c5-1426-4bb5-8bce-56e09fbcf7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48172", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:19.000000Z"}, {"uuid": "c6d4dee1-f707-46dc-9377-264c36a8d2a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48175", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16628", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48175\n\ud83d\udd25 CVSS Score: 4.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L)\n\ud83d\udd39 Description: In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.\n\ud83d\udccf Published: 2025-05-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-16T05:06:31.307Z\n\ud83d\udd17 References:\n1. https://github.com/AOMediaCodec/libavif/commit/64d956ed5a602f78cebf29da023280944ee92efd\n2. https://github.com/AOMediaCodec/libavif/pull/2769\n3. https://github.com/AOMediaCodec/libavif/security/advisories/GHSA-762c-2538-h844", "creation_timestamp": "2025-05-16T05:34:35.000000Z"}, {"uuid": "c71c03c0-abec-4668-865a-9224df4a21e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48174", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwmpc3422c2w", "content": "", "creation_timestamp": "2025-08-17T20:17:34.527186Z"}, {"uuid": "2a273a42-64bf-42b8-bfb2-a237cd92f0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48175", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwmpc3422c2w", "content": "", "creation_timestamp": "2025-08-17T20:17:34.659612Z"}, {"uuid": "f4232549-bb73-4d85-8db1-41fbef0f4cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48174", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lwmq7msods2w", "content": "", "creation_timestamp": "2025-08-17T20:34:08.570636Z"}, {"uuid": "1c3e92ee-1ff8-4b42-8cf8-e497b9e323c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48174", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16629", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48174\n\ud83d\udd25 CVSS Score: 4.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L)\n\ud83d\udd39 Description: In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.\n\ud83d\udccf Published: 2025-05-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-16T05:06:02.974Z\n\ud83d\udd17 References:\n1. https://github.com/AOMediaCodec/libavif/pull/2768\n2. https://github.com/AOMediaCodec/libavif/commit/e5fdefe7d1776e6c4cf1703c163a8c0535599029\n3. https://github.com/AOMediaCodec/libavif/commit/50a743062938a3828581d725facc9c2b92a1d109\n4. https://github.com/AOMediaCodec/libavif/commit/c9f1bea437f21cb78f9919c332922a3b0ba65e11", "creation_timestamp": "2025-05-16T05:34:37.000000Z"}]}