NULL Pointer Dereference in Ravynos by Ravynsoft
CVE-2025-14309

7.5HIGH

Key Information:

Vendor

Ravynsoft

Status
Ravynos
Vendor
CVE Published:
9 December 2025

What is CVE-2025-14309?

A NULL Pointer Dereference vulnerability exists in Ravynos by Ravynsoft, affecting versions through 0.5.2. This flaw may allow an attacker to exploit the application, potentially causing unexpected behavior or crashes. Users are urged to update to the latest version to mitigate risks associated with this vulnerability. A patch is available for download at the official repository.

Affected Version(s)

ravynos 0 <= 0.5.2

References

https://github.com/ravynsoft/ravynos/pull/502
patch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

TITAN Team ([email protected])
JSON
.