CVE-2025-5031: ackites killwxapkg Uncontrolled Resource Consumption
Vulnerability summary
CVE-2025-5031 is a low (CVSS 3.1) Uncontrolled Resource Consumption vulnerability in ackites killwxapkg. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 37.6% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 21-05-2025PublishedVulnerability first disclosed.
- 21-05-2025Last modifiedVulnerability information updated.
Description
A vulnerability was found in Ackites KillWxapkg up to 2.4.1. It has been rated as problematic. This issue affects some unknown processing of the component wxapkg File Decompression Handler. The manipulation leads to resource consumption. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
CVSS metrics
9 scores · 3 sources · 4 versions- OSV · GoEcosystem advisory · calculated2.3LowCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- NVDNIST2.3LowCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- OSV · GoEcosystem advisory · calculated3.1LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
- NVDNIST3.1LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L
- NVDNIST2.6LowAV:N/AC:H/Au:N/C:N/I:N/A:P
EPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
+0.02 pp
From 0.43% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundKillwxapkg
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Ackites1 product
- killwxapkg2.4.0 | 2.4.1
Github.com/Ackites1 product
- KillWxapkg≤ 2.4.1 | All versions (No fix recorded)
2 vendors · 2 products
