CVE-2025-4001 is a problematic vulnerability in scipopt scip versions up to 9.2.1, specifically affecting the File Descriptor Handler component within the examples/LOP/src/genRandomLOPInstance.c file. It allows for uncontrolled file descriptor consumption through manipulation of the 'File' argument in the 'main' function. Rated with a CVSS score of 3.3 (Low), this vulnerability requires local access for exploitation and results in a low impact on availability (A:L), with no impact on confidentiality or integrity. The attack vector is local (AV:L) and attack complexity is low (AC:L). Currently, there is no evidence of active exploitation, nor is there any public exploit code available (Metasploit, Nuclei, ExploitDB). Community discussion and media coverage are minimal, indicating low public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Scipopt | Scip | 9.2.0, 9.2.1CNA affected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.