Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2025-35435

CISA Thorium download stream divide by zero

Description

CISA Thorium accepts a stream split size of zero then divides by this value. A remote, authenticated attacker could cause the service to crash. Fixed in commit 89101a6.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CISA Thorium

Default version status: unknown

  • 1.0.0 to < 89101a6affected
  • 89101a6unaffected

References