Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.
Vulnerability Description
Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part of Apache NuttX RTOS repository. This standalone program is optional and neither part of NuttX RTOS nor Applications runtime, but active bdf-converter users may be affected when this tool is exposed to external provided user data data (i.e. publicly available automation). This issue affects Apache NuttX: from 6.9 before 12.9.0. Users are recommended to upgrade to version 12.9.0, which fixes the issue.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-47868
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Chánh Phạm <chanhphamviet@gmail.com>
- Nathan Hartman <hartman.nathan@gmail.com>
- Tomek CEDRO <tomek@cedro.info>
- Alan Carvalho de Assis <acassis@gmail.com>
- Alin Jerpelea <jerpelea@gmail.com>
- Lee, Lup Yuen <luppy@appkaki.com>
- Arnout Engelen <engelen@apache.org>
References
More from Apache Software Foundation
View All →Affected Vendor
Apache Software Foundation
View all reports →