CVE-2025-35435

Publication date

2025-09-17 16:53:22

Family

cisa-cg

State

PUBLISHED

Description

CISA Thorium accepts a stream split size of zero then divides by this value. A remote, authenticated attacker could cause the service to crash. Fixed in commit 89101a6.