PatchTheCVECVE-2025-30307: XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead t
CVE-2025-30307 is a medium-severity flaw (CVSS 5.5) affecting xmp toolkit software development kit. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.5 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | Required |
| EPSS exploit chance | 0.2% (top 84%) |
| CISA exploited list | No |
| Weakness | CWE-125 |
| Published | 2025-04-08 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-30307?
xmp toolkit software development kit: upgrade to 2025.03. Exact commands for each OS are on this page.
Is CVE-2025-30307 being exploited?
CVE-2025-30307 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-30307 affect?
CVE-2025-30307 affects xmp toolkit software development kit. Severity is medium (CVSS 5.5). XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation o
How urgent is CVE-2025-30307?
Priority 23/100. No elevated risk signals yet.
Related CVEs
- CVE-2025-30309 MEDIUM 5.5 UPGRADE XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead t
- CVE-2025-30308 MEDIUM 5.5 UPGRADE XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead t
- CVE-2025-30306 MEDIUM 5.5 UPGRADE XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead t
- CVE-2025-30305 MEDIUM 5.5 UPGRADE XMP Toolkit versions 2023.12 and earlier are affected by an out-of-bounds read vulnerability that could lead t