What is the CVSS score of EUVD-2025-28480?

EUVD-2025-28480 has a CVSS 4.0 base score of 2.0 (Low). CVSS vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:N/R:A/V:D/RE:M/U:Green. EPSS exploitation probability: 0.0%.

Which versions of Ubuntu are affected by EUVD-2025-28480?

CVE-2025-52937 is a low-severity vulnerability (CVSS 2.0). The limited severity suggests constrained impact, typically requiring specific conditions or local access for exploitation.. A patch is available.

How to fix or mitigate EUVD-2025-28480?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Ubuntu EUVD-2025-28480

| CVE-2025-52937 LOW

Download of Code Without Integrity Check (CWE-494)

2025-06-23 cve_disclosure@tech.gov.sg

Information Disclosure Ubuntu Debian

2.0

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.0 LOW

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:N/R:A/V:D/RE:M/U:Green

Ubuntu

MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/S:N/AU:N/R:A/V:D/RE:M/U:Green

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 15, 2026 - 22:10 euvd

EUVD-2025-28480

Analysis Generated

Mar 15, 2026 - 22:10 vuln.today

CVE Published

Jun 23, 2025 - 10:15 nvd

LOW 2.0

DescriptionCVE.org

Vulnerability in PointCloudLibrary PCL (surface/src/3rdparty/opennurbs modules). This vulnerability is associated with program files crc32.C.

This vulnerability is only relevant if the PCL version is older than 1.14.0 or the user specifically requests to not use the system zlib (WITH_SYSTEM_ZLIB=FALSE).

AnalysisAI

CVE-2025-52937 is a security vulnerability (CVSS 2.0). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

Vulnerability type not specified by vendor.

RemediationAI

Monitor vendor channels for patch availability.

Same weakness CWE-494 – Download of Code Without Integrity Check

View all

CVE-2026-27180 CRITICAL POC

9.8

CVE-2026-3502 HIGH POC

7.8

CVE-2025-15556 HIGH

7.5

CVE-2025-56513 CRITICAL POC

9.8

CVE-2020-28332 CRITICAL POC

9.8

CVE-2022-24644 HIGH POC

8.8

CVE-2022-28944 HIGH POC

8.8

CVE-2025-57431 HIGH POC

8.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

Ubuntu

Priority: Medium

pcl

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
jammy	needs-triage	-
noble	needs-triage	-
upstream	needs-triage	-
plucky	ignored	end of life, was needs-triage
oracular	ignored	end of life, was needs-triage
questing	needs-triage	-

Debian

pcl

Release	Status	Fixed Version	Urgency
bullseye	fixed	1.11.1+dfsg-1	-
bookworm	fixed	1.13.0+dfsg-3	-
trixie	fixed	1.15.0+dfsg-2	-
forky	fixed	1.15.0+dfsg-3	-
sid	fixed	1.15.1+dfsg-1	-
(unstable)	not-affected	-	-

EUVD-2025-28480 vulnerability details – vuln.today

Back

Ubuntu EUVD-2025-28480

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-494 – Download of Code Without Integrity Check

Same technique Information Disclosure

Vendor StatusVendor

Ubuntu

Debian

Share

External POC / Exploit Code