Vulnerability · Published Sep 22, 2025 · Assigned by GitHub_M
CVE-2025-59418BunnyPad Vulnerable to Buffer Overflow When Opening Files of Size 20MB or Greater
Medium 5.5
In plain English
A medium-severity resource allocation without limits in BunnyPad-SRC from GSYT-Productions. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 93.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
BunnyPad is a note taking software. Prior to version 11.0.27000.0915, opening files greater than or equal to 20MB causes buffer overflow to occur. This issue has been patched in version 11.0.27000.0915. Users who wish not to upgrade should refrain from opening files larger than 10MB.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| GSYT-Productions | BunnyPad-SRC | < 11.0.27000.0915 |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H