Data Parsing Flaw in Perforce Product Exposes Sensitive Information

CVE-2025-14591

What is CVE-2025-14591?

A notable vulnerability exists in the Perforce Versioning Engine, related to the handling of End-of-Record (EOR) characters in delimited files. Despite a recent patch aimed at correcting this issue, the implementation of an incorrect EOR configuration can lead to inaccurate data parsing. This flaw allows for the potential exposure of personally identifiable information (PII), compromising the privacy and security of users. Organizations utilizing affected versions of Perforce must assess their systems and implement necessary updates to mitigate risks associated with this vulnerability.

References