Remote Code Execution Vulnerability in CISA Thorium by CISA

CVE-2025-35435

What is CVE-2025-35435?

CISA Thorium has a vulnerability that allows a remote, authenticated attacker to exploit a flaw related to the handling of stream split sizes. When a stream split size of zero is accepted, it results in a division by this value, triggering a crash of the service. This issue can disrupt operations and lead to potential unauthorized access. The vulnerability has been addressed in the latest commit, ensuring that the service securely manages stream split sizes.

References