PT-2025-62955

Published

2025-12-02

·

Updated

2025-12-02

Description by

CVSS 4.0
1.0
Low
MetricsAV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
maxminddb prior to version 0.27 declared Reader::open mmap as safe despite wrapping an inherently unsafe memmap2 operation with no extra step done to guarantee safety. This could have led to undefined behaviour if the file were to be modified on disk while the memory map was still active.
Exploitability
Fix
Vendors
Affected products
Related identifiers
GHSA-MJ73-J457-8X9Q
Found an issue in the description? Have something to add? Feel free to write us 👾