NixOS is a Linux distribution built on top of the Nix package manager. It is completely declarative, its system configurations are reproducible, makes configuration changes reliable and atomic, and eliminates configuration drift.

NixOS

Homebrew is a free and open-source software package management system that simplifies the installation of software on Apple's macOS operating system and Linux. The name is intended to suggest the idea of building software on the Mac depending on the user's taste. Originally written by Max Howell, the package manager has gained popularity in the Ruby on Rails community and earned praise for its extensibility.

Homebrew

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

Alpine Linux is a Linux distribution based on musl and BusyBox, designed for security, simplicity, and resource efficiency.

Linux Alpine

Echo is a secure, minimal Linux OS built vulnerability-free. It is fully compatible across environments and continuously patched - making it a clean, dependable base layer for modern applications. Echo is used by organizations focused on security and reliability, including those with compliance or FIPS requirements.

Echo

A heap-use-after free in the PdfTokenizer::ReadDictionary function of podofo v0.10.0 to v0.10.5 allows attackers to cause a Denial of Service (DoS) by supplying a crafted PDF file. NOTE: this is disputed by the Supplier because there is no available file to reproduce the issue.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2025-48606	HIGH	7.8	NixOS	android	No	No	Dec 08, 2025
CVE-2025-48625	HIGH	7	NixOS	android	No	No	Dec 08, 2025
CVE-2025-48608	MEDIUM	5.5	NixOS	android	No	No	Dec 08, 2025
CVE-2025-48569	MEDIUM	5.5	NixOS	android	No	No	Dec 08, 2025
CVE-2025-65799	MEDIUM	4.3	NixOS	memos	No	Yes	Dec 08, 2025

CVE-2025-46205:
NixOS vulnerability analysis and mitigation

8.1

Related NixOS vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2025-46205: NixOS vulnerability analysis and mitigation