Integer Underflow Vulnerability in DHAV File Parsing by Affected Vendor

CVE-2025-59729

What is CVE-2025-59729?

This vulnerability arises during the parsing of DHAV files due to an integer underflow in offset calculations. If a DHAV file exceeds the maximum buffer size, it can lead to erroneous access before the allocated buffer's start. The parsing logic, which scans backward through the buffer to identify the dhav tag, mistakenly allows certain offsets that can cause the access to precede the allocated memory limit. This mismanagement hinders the integrity of the software and needs urgent attention for users of the DHAV file parser versions below 8.0. Upgrading to version 8.0 or later is strongly recommended to mitigate this risk.

References