CVE-2025-62672: 
Linux Debian vulnerability analysis and mitigation

CVE-2025-62672 affects rplay through version 3.3.2, discovered and disclosed on October 18, 2025. The vulnerability exists in the memcpy functionality within the RPLAYDATA case in rplayunpack function, located in librplay/rplay.c. This vulnerability is particularly concerning as it can be exploited without authentication through packet data (NVD, OSS Security).

The vulnerability stems from improper handling of memory operations in the rplayunpack function, specifically at line 470 in librplay/rplay.c. When processing RPLAYDATA cases, the function performs unsafe memory operations that can lead to a SIGSEGV (Segmentation Fault). The vulnerability has been assigned a CVSS 3.1 Base Score of 5.3 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L (NVD).

The vulnerability allows attackers to cause a denial of service condition through a segmentation fault (SIGSEGV) that results in daemon crash. The impact is particularly significant as the vulnerability can be exploited remotely without requiring authentication, potentially affecting system availability (OSS Security).