Log in Start free

Vulnerability · Published Feb 7, 2026 · Assigned by VulDB

CVE-2025-15564Mapnik value.cpp operator divide by zero

Low 3.3

In plain English

A low-severity security flaw in Mapnik. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.2%top 86.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12mapnikno fix listedDEBIAN-CVE-2025-15564
Debian:13mapnikno fix listedDEBIAN-CVE-2025-15564
Debian:14mapnik4.2.1+ds-2DEBIAN-CVE-2025-15564
Ubuntu:22.04:LTSmapnikno fix listedUBUNTU-CVE-2025-15564
Ubuntu:24.04:LTSmapnikno fix listedUBUNTU-CVE-2025-15564
Ubuntu:25.10mapnikno fix listedUBUNTU-CVE-2025-15564
Ubuntu:26.04:LTSmapnikno fix listedUBUNTU-CVE-2025-15564
Ubuntu:26.10mapnikno fix listedUBUNTU-CVE-2025-15564

Affected products (as reported)

VendorProductVersions
n/a Mapnik 4.04.14.2.0

Weakness: CWE-369, CWE-404 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

References