Threats Tagged 'cve-2025-66909'
View all threats tagged with 'cve-2025-66909'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-66909'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-66909 is a high-severity denial of service vulnerability in the Turms AI-Serving module (v0.10.0-SNAPSHOT and earlier). It arises from improper validation of image dimensions and pixel count during decompression in the ExtendedOpenCVImage class, which uses OpenCV's imread() function. An attacker can upload a crafted compressed image that decompresses to consume excessive memory, causing immediate service crashes due to OutOfMemoryError. No authentication or user interaction is required if the OCR service is publicly accessible, enabling remote attackers to repeatedly trigger service outages. This vulnerability affects availability but does not impact confidentiality or integrity. European organizations using this AI-Serving module in publicly accessible OCR services are at risk of denial of service attacks. Mitigation requires implementing strict validation of image size before decompression, rate limiting, and restricting public access. Countries with higher adoption of AI and OCR technologies in critical infrastructure and services, such as Germany, France, and the UK, are most likely to be affected. Join the discussion | CVE Database V5 | 12/19/2025, 00:00:00 UTC Added: 12/19/2025, 14:40:04 UTC |
Showing 1 to 1 of 1 result