CVE-2025-25962

Summary

CVE-2025-25962 is a privilege escalation vulnerability affecting Coresmartcontracts Uniswap v.3.0. An attacker can exploit this issue, present in the _modifyPosition function, to escalate their privileges remotely. This vulnerability has since been addressed in the v.4.0 update. This flaw could potentially allow an attacker to gain unauthorized access or control within the affected system. The impact of this issue can range from data theft to system compromise. Users of Uniswap v.3.0 are encouraged to upgrade to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.