Read the docs
TI-2025-14173 Aliases CVE-2025-15534GHSA-4696-58w6-rqw4

raysan5 raylib rtext.c LoadFontData integer overflow

Priority LOW 22CWE-189Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability was identified in raysan5 raylib up to 909f040. Affected by this issue is the function LoadFontData of the file src/rtext.c. The manipulation leads to integer overflow. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The identifier of the patch is 5a3391fdce046bc5473e52afbd835dd2dc127146. It is suggested to install a patch to address this issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00238 14th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD and the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
raysan5raylib909f040—No fix listedCNA
  • raylib Vendorraysan5 Affected 909f040 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:raylib:raylib:*:*:*:*:*:*:*:*before 2026-01-01VulnerableRaylib
  • cpe:2.3:a:raylib:raylib:*:*:*:*:*:*:*:* Versions before 2026-01-01 Vulnerable ·Raylib

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-15534
  2. 2026-10-03 Alias added: GHSA-4696-58w6-rqw4

References

Exploit 2

Patch 1

Other 2

  • TI-2023-11348 Cross-site scripting in raysan5/raylib CVSS 3.1MEDIUM 6.1
  • TI-2025-14172 raysan5 raylib rtext.c GenImageFontAtlas heap-based overflow CVSS 4.0MEDIUM 4.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences