CVE-2025-15564

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-15564
A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

1.7 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:S/C:N/I:N/A:P

Exploitability : 3.1 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://github.com/mapnik/mapnik/ Product
https://github.com/mapnik/mapnik/issues/4545 Exploit Issue Tracking
https://github.com/oneafter/1219/blob/main/repro Exploit
https://vuldb.com/?ctiid.344502 Permissions Required VDB Entry
https://vuldb.com/?id.344502 Third Party Advisory VDB Entry
https://vuldb.com/?submit.743386 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:mapnik:mapnik:*:*:*:*:*:*:*:*
History

28 Feb 2026, 00:27

Type Values Removed Values Added
CPE cpe:2.3:a:mapnik:mapnik:*:*:*:*:*:*:*:*
First Time Mapnik
Mapnik mapnik
References () https://github.com/mapnik/mapnik/ - () https://github.com/mapnik/mapnik/ - Product
References () https://github.com/mapnik/mapnik/issues/4545 - () https://github.com/mapnik/mapnik/issues/4545 - Exploit, Issue Tracking
References () https://github.com/oneafter/1219/blob/main/repro - () https://github.com/oneafter/1219/blob/main/repro - Exploit
References () https://vuldb.com/?ctiid.344502 - () https://vuldb.com/?ctiid.344502 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.344502 - () https://vuldb.com/?id.344502 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.743386 - () https://vuldb.com/?submit.743386 - Third Party Advisory, VDB Entry
Summary
  • (es) Una vulnerabilidad ha sido encontrada en Mapnik hasta 4.2.0. Esta vulnerabilidad afecta a la función mapnik::detail::mod&lt;...&gt;::operator del archivo src/value.cpp. La manipulación conduce a una división por cero. El ataque necesita ser realizado localmente. El exploit ha sido divulgado al público y puede ser utilizado. El proyecto fue informado del problema tempranamente a través de un informe de problema pero no ha respondido aún.

07 Feb 2026, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-02-07 22:16

Updated : 2026-02-28 00:27

NVD link : CVE-2025-15564

Mitre link : CVE-2025-15564

CVE.ORG link : CVE-2025-15564

JSON object : View

Products Affected

mapnik

  • mapnik
CWE
CWE-369

Divide By Zero

CWE-404

Improper Resource Shutdown or Release