Skip to main content

Improper Cleanup on Thrown Exception

CVE-2025-59399

Severity Low
Score 3.1/10

Summary

libocpp before 0.28.0 allows a denial of service (EVerest crash) because a secondary exception is thrown during error message generation.

  • HIGH
  • ADJACENT_NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • LOW

CWE-460 - Improper Cleanup on Thrown Exception

The product does not clean up its state or incorrectly cleans up its state when an exception is thrown, leading to unexpected state or control flow.

References

Advisory Timeline

  • Published