CVE catalog

CVE-2025-0781

SimGear vulnerability

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.36% · Oct 25, 2026

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansimgearsid1:2024.1.5+dfsg-1fixed
Debiansimgearforky1:2024.1.5+dfsg-1fixed
Debiansimgeartrixie1:2020.3.19+dfsg-1fixed
Debiansimgearbookworm1:2020.3.16+dfsg-1+deb12u1fixed
Debianflightgearsid1:2024.1.5+dfsg-1fixed
Debianflightgeartrixie1:2020.3.19+dfsg-1fixed
Debianflightgearbookworm1:2020.3.16+dfsg-1+deb12u1fixed
Ubuntusimgearnoble1:2020.3.18+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntulibsimgear-devnoble1:2020.3.18+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntusimgearpro1:2020.3.18+dfsg-2vulnerable
Ubuntusimgearpro1:2020.3.18+dfsg-2.1vulnerable
Ubuntusimgearpro1:2020.3.18+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntusimgearpro1:2020.3.18+dfsg-2vulnerable
Ubuntusimgearpro1:2020.3.18+dfsg-2.1vulnerable
Ubuntusimgearpro1:2020.3.18+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntuflightgear16.043.4.0-1build1vulnerable
Ubuntuflightgear16.043.4.0-2vulnerable
Ubuntuflightgear16.043.4.0-3vulnerable
Ubuntuflightgear16.043.4.0-3ubuntu1vulnerable
Ubuntuflightgear16.043.4.0-3ubuntu1.1vulnerable
Ubuntuflightgear18.041:2017.2.1+dfsg-4vulnerable
Ubuntuflightgear18.041:2017.3.1+dfsg-3vulnerable
Ubuntuflightgear18.041:2017.3.1+dfsg-4vulnerable
Ubuntuflightgear18.041:2018.1.1+dfsg-1vulnerable
Ubuntuflightgear20.041:2019.1.1+dfsg-1vulnerable
Ubuntuflightgear20.041:2019.1.1+dfsg-2vulnerable
Ubuntuflightgear22.041:2020.3.6+dfsg-1vulnerable
Ubuntuflightgear22.041:2020.3.6+dfsg-1build1vulnerable
Ubuntuflightgear24.041:2020.3.18+dfsg-1vulnerable
Ubuntuflightgear24.041:2020.3.18+dfsg-1build1vulnerable
Ubuntuflightgear24.041:2020.3.18+dfsg-1build3vulnerable
Ubuntuflightgear24.041:2020.3.18+dfsg-1.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansimgearsourcesid1:2020.3.19+dfsg-1not yet assignedNot reportedNot reported
Debiansimgearsourceforky1:2020.3.19+dfsg-1not yet assignedNot reportedNot reported
Debiansimgearsourcetrixie1:2020.3.19+dfsg-1not yet assignedNot reportedNot reported
Debiansimgearsourcebookworm1:2020.3.16+dfsg-1+deb12u1not yet assignedNot reportedNot reported
Debianflightgearsourcesid1:2020.3.19+dfsg-1not yet assignedNot reportedNot reported
Debianflightgearsourcetrixie1:2020.3.19+dfsg-1not yet assignedNot reportedNot reported
Debianflightgearsourcebookworm1:2020.3.16+dfsg-1+deb12u1not yet assignedNot reportedNot reported
Ubuntusimgeardebnoble1:2020.3.18+dfsg-2.1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibsimgear-devdebnoble1:2020.3.18+dfsg-2.1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntusimgeardebpro1:2020.3.18+dfsg-2.1ubuntu0.1~esm1Not reportedUSN-7965-1Not reported
Ubuntusimgeardebpro1:2020.3.18+dfsg-2.1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2025-0781Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [flightgear]Fixed
    Details (2)

    • 1:2020.3.16+dfsg-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:2020.3.16+dfsg-1+deb12u1

      usn · flightgear · debian · bookworm

    • 1:2020.3.16+dfsg-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:2020.3.16+dfsg-1+deb12u1

      usn · flightgear · debian · bookworm

  • [libsimgear-dev]Fixed

    Source package: [simgear]

    Details (2)

    • 1:2020.3.16+dfsg-1+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1:2020.3.16+dfsg-1+deb12u1

      usn · simgear · debian · bookworm

    • 1:2020.3.16+dfsg-1+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1:2020.3.16+dfsg-1+deb12u1

      usn · simgear · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Ubuntu Security Notices (USN)]