← Database

CVE-2025-35435

MEDIUM CVSS: 4.3 Published: 2025-09-17 Modified: 2026-06-17

Description

CISA Thorium accepts a stream split size of zero then divides by this value. A remote, authenticated attacker could cause the service to crash. Fixed in commit 89101a6.

Affected Platforms

Cisa Thorium

Weakness Type

CWE-369

References