PT-2025-47819

CVE-2025-11931

Published

2025-11-21

Updated

2026-07-14

Description by

CVSS 3.1

8.2

High

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-11931

Description An integer underflow can lead to out-of-bounds access during decryption using XChaCha20-Poly1305. This occurs specifically when calling the wc XChaCha20Poly1305 Decrypt() function, which is utilized by direct application calls and not through TLS connections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Luigino Camastra

Vendors

Affected products

Weakness enumeration

CWE-191: Integer Underflow (Wrap or Wraparound)

Related identifiers

CVE-2025-11931