What is CVE-2025-59418?

CVE-2025-59418 is a medium-severity vulnerability in Gsyt-Productions Bunnypad-Src, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 5.5/10. Published 2025-09-22.

How severe is CVE-2025-59418?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Resource exhaustion in Gsyt-Productions Bunnypad-Src

CVE-2025-59418

BunnyPad is a note taking software. Prior to version 11.0.27000.0915, opening files greater than or equal to 20MB causes buffer overflow to occur. This issue has been patched in version 11.0.27000.0915. Users who wish not to upgrade should refrain from opening files larger than 10MB.

EPSS: 0.002 (5.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H.

Affected products

Gsyt-productions Bunnypad-src — versions < 11.0.27000.0915

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-59418?: CVE-2025-59418 is a medium-severity vulnerability in Gsyt-Productions Bunnypad-Src, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 5.5/10. Published 2025-09-22.
How severe is CVE-2025-59418?: Medium severity. CVSS v3 base score is 5.5 out of 10.