Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC3

CVE-2025-25214

CVSS 3.1
7.5 high
EPSS
1%p69
Published
·
Modified
Analyze CVE-2025-25214 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A race condition vulnerability exists in the aVideoEncoder.json.php unzip functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A series of specially crafted HTTP request can lead to arbitrary code execution.

Vendors
wwbn
Products
avideo
Weakness
CWE-362
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

2 stories