CVE-2025-7519

Name of the Vulnerable Software and Affected Versions: polkit (affected versions not specified)

Description: A flaw exists in polkit where processing an XML policy with 32 or more nested elements in depth can trigger an out-of-bounds write. This can lead to a crash or unexpected behavior, with the possibility of arbitrary code execution. Exploitation requires a high-privilege account to place a malicious policy file.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.