CVE-2025-49415 is a path traversal vulnerability in Fastw3b LLC's FW Gallery. This vulnerability arises from improper limitation of a pathname to a restricted directory, which may allow an attacker to access files outside the intended directory scope. The vulnerability has a CVSS 3.1 score of 8.6 (AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H), indicating it is remotely exploitable without privileges or user interaction and can cause a high impact on availability. The affected version is exactly version 0 of FW Gallery. No vendor advisory or patch information is available in the provided data. The detailed description text includes unrelated research on Android media decoder vulnerabilities and exploit chains, which is not relevant to this specific CVE.

The vulnerability allows an attacker to perform path traversal attacks, potentially accessing or affecting files outside the intended restricted directory. The CVSS vector indicates no confidentiality or integrity impact but a high impact on availability, suggesting possible denial of service or disruption. The vulnerability is remotely exploitable without privileges or user interaction, increasing its risk. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Until a patch is available, restrict access to the affected product and monitor for unusual file access patterns related to FW Gallery.