CVE-2025-4001
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2025-4001 is a newly identified vulnerability affecting the scipopt scip software up to version 9.2.1. This issue lies within the File Descriptor Handler component, specifically in the function main of the file examples/LOP/src/genRandomLOPInstance.c. The manipulation of the argument File results in uncontrolled file descriptor consumption, leading to potential security risks. Local access is necessary for an attacker to exploit this vulnerability. Upgrading to version 9.2.2, which includes the patch with identifier d6da63b941216d75fbc1aefea9abf1de6712a2d0, is recommended to mitigate this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Linux Kernel
Affected Vendors
- LINUX