CVE-2025-6140

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-6140
A vulnerability, which was classified as problematic, was found in spdlog up to 1.15.1. This affects the function scoped_padder in the library include/spdlog/pattern_formatter-inl.h. The manipulation leads to resource consumption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 1.15.2 is able to address this issue. The identifier of the patch is 10320184df1eb4638e253a34b1eb44ce78954094. It is recommended to upgrade the affected component.
CVSS

No CVSS.

References
Link Resource
https://github.com/gabime/spdlog/commit/10320184df1eb4638e253a34b1eb44ce78954094 Patch
https://github.com/gabime/spdlog/issues/3360 Exploit Issue Tracking
https://github.com/gabime/spdlog/issues/3360 Exploit Issue Tracking
https://github.com/gabime/spdlog/issues/3360#issuecomment-2729579422 Exploit Issue Tracking
https://github.com/gabime/spdlog/releases/tag/v1.15.2 Release Notes
https://vuldb.com/?ctiid.312609 Permissions Required VDB Entry
https://vuldb.com/?id.312609 Third Party Advisory VDB Entry
https://vuldb.com/?submit.592999 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:gabime:spdlog:*:*:*:*:*:*:*:*
History

02 Jul 2025, 18:58

Type Values Removed Values Added
CPE cpe:2.3:a:gabime:spdlog:*:*:*:*:*:*:*:*
References () https://vuldb.com/?submit.592999 - () https://vuldb.com/?submit.592999 - Third Party Advisory, VDB Entry
References () https://github.com/gabime/spdlog/issues/3360#issuecomment-2729579422 - () https://github.com/gabime/spdlog/issues/3360#issuecomment-2729579422 - Exploit, Issue Tracking
References () https://github.com/gabime/spdlog/releases/tag/v1.15.2 - () https://github.com/gabime/spdlog/releases/tag/v1.15.2 - Release Notes
References () https://vuldb.com/?ctiid.312609 - () https://vuldb.com/?ctiid.312609 - Permissions Required, VDB Entry
References () https://github.com/gabime/spdlog/commit/10320184df1eb4638e253a34b1eb44ce78954094 - () https://github.com/gabime/spdlog/commit/10320184df1eb4638e253a34b1eb44ce78954094 - Patch
References () https://vuldb.com/?id.312609 - () https://vuldb.com/?id.312609 - Third Party Advisory, VDB Entry
References () https://github.com/gabime/spdlog/issues/3360 - () https://github.com/gabime/spdlog/issues/3360 - Exploit, Issue Tracking
First Time Gabime
Gabime spdlog

17 Jun 2025, 16:15

Type Values Removed Values Added
CWE CWE-404
CWE-400
CVSS v2 : unknown
v3 : 3.3 		v2 : unknown
v3 : unknown

16 Jun 2025, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-16 22:16

Updated : 2025-07-02 18:58

NVD link : CVE-2025-6140

Mitre link : CVE-2025-6140

JSON object : View

Products Affected

gabime

  • spdlog
CWE

No CWE.