VulnerabilityDeferred

CVE-2025-70330

By modifying specific fields at precise offsets within an otherwise valid .EGP file, an attacker can trigger an out-of-bounds memory read during parsing.

LOW 3.3EPSS 0.15%

Does this matter?

Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.

Description

Easy Grade Pro 4.1.0.2 contains a file parsing logic flaw in the handling of proprietary .EGP gradebook files. By modifying specific fields at precise offsets within an otherwise valid .EGP file, an attacker can trigger an out-of-bounds memory read during parsing. This results in an unhandled access violation and application crash, leading to a local denial-of-service condition when the crafted file is opened by a user.

CVSS 3.1: 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
EPSS: 0.15% probability · 4th percentile
CISA KEV: Not listed
Weakness: CWE-125
Source: cve@mitre.org

References

https://github.com/TheMalwareGuardian/CVE-2025-70330

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.