Skip to main content

Suse EUVDEUVD-2025-32573

| CVE-2025-49090 HIGH
External Control of Critical State Data (CWE-642)
2025-10-02 cve@mitre.org
Information Disclosure Suse
7.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.1 HIGH
AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L
SUSE
HIGH
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L
Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Changed
Confidentiality
None
Integrity
High
Availability
Low

Lifecycle Timeline

4
Patch released
Apr 06, 2026 - 14:30 nvd
Patch available
EUVD ID Assigned
Mar 13, 2026 - 19:12 euvd
EUVD-2025-32573
Analysis Generated
Mar 13, 2026 - 19:12 vuln.today
CVE Published
Oct 02, 2025 - 19:15 nvd
HIGH 7.1

DescriptionCVE.org

The Matrix specification before 1.16 (i.e., with a room version before 12 and State Resolution before 2.1) has deficient state resolution.

AnalysisAI

CVE-2025-49090 is a security vulnerability (CVSS 7.1). High severity vulnerability requiring prompt remediation.

Technical ContextAI

Vulnerability type not specified by vendor. CVSS 7.1 indicates high severity.

RemediationAI

Monitor vendor channels for patch availability.

Same weakness CWE-642 – External Control of Critical State Data

View all
CVE-2018-15382 HIGH
8.6
CVE-2024-8754 HIGH
8.1
CVE-2019-9496 HIGH
7.5
CVE-2024-22387 MEDIUM
6.8
CVE-2020-1976 MEDIUM
5.5
CVE-2022-32859 MEDIUM
5.3

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Vendor StatusVendor

SUSE

Severity: High
Product Status
openSUSE Tumbleweed Fixed

Share

EUVD-2025-32573 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy