CVE-2025-30232 - A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges

HIGH

A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges

Published Mar 27, 2025

8.1

HIGH

CVSS 3.1

EPSS 0.52%

A use-after-free in Exim 4.96 through 4.98.1 could allow users (with command-line access) to escalate privileges.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
4.96	affected	<4.98.2

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2025/03/26/1		Mailing ListThird Party Advisory
https://www.exim.org/static/doc/security/CVE-2025-30232.txt		Vendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Mar 27, 2025

Updated Mar 28, 2025

Reserved Mar 19, 2025

Updated Mar 28, 2025

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a