Skip to content

Instantly share code, notes, and snippets.

@Giles-one

Giles-one/CVE-2025-29364.txt Secret

Created August 20, 2025 15:29
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Giles-one/a398e3da21ea9567970c6f0de543c3b3 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Giles-one/a398e3da21ea9567970c6f0de543c3b3 to your computer and use it in GitHub Desktop.
Download ZIP
The reference for CVE-2025-29364
Raw
CVE-2025-29364.txt
[CVE ID]
CVE-2025-29364
[PRODUCT]
spimsimulator
[Affected Version]
spim <= 9.1.24
[Vulnerability Type]
CWE-125 - Out-of-bounds Read
CWE-787 - Out-of-bounds Write
CWE-274 - Privilege Issues
[Description]
SPIMsimulator is an emulator software designed for writing and debugging MIPS assembly language. The SPIM MIPS Simulator is vulnerable to a memory overflow in its WRITE_SYSCALL and READ_SYSCALL system calls. This flaw can be exploited by an attacker to corrupt the host machine's memory, potentially leading to a simulator escape.
[Details]
https://github.com/Giles-one/spimsimulatorEscape?tab=readme-ov-file#bug2-bypass-check-in-read_syscall-and-write_syscall-leading-to-out-of-bounds-readwrite
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment