File Parsing Logic Flaw in Easy Grade Pro by Easy
CVE-2025-70330

3.3LOW

Key Information:

Vendor

Easy

Status
Easy Grade Pro
Vendor
CVE Published:
11 March 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-70330?

Easy Grade Pro 4.1.0.2 exhibits a flaw in its file parsing logic, particularly when handling proprietary .EGP gradebook files. An attacker can exploit this vulnerability by crafting a specific .EGP file with altered fields at designated offsets. When the compromised file is processed by the application, it can lead to an out-of-bounds memory read, resulting in an unhandled access violation. This can cause the application to crash and create a local denial-of-service condition, preventing legitimate users from accessing their gradebooks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-70330
Created by TheMalwareGuardian

References

http://easy.com
http://orbis.com
https://github.com/TheMalwareGuardian/CVE-2025-70330

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

JSON
.