CVE catalog
CVE-2025-53964
UBUNTU-CVE-2025-53964
- Severity
- Unknown
- Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.49% · Oct 25, 2026
GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a crafted dictionary and then searches for any term included in that dictionary.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Ubuntu | goldendict | 16.04 | 1.5.0~git20131003-1build4 | vulnerable |
| Ubuntu | goldendict | 16.04 | 1.5.0~git20150923-1 | vulnerable |
| Ubuntu | goldendict | 18.04 | 1.5.0~rc2+git20170908+ds-1 | vulnerable |
| Ubuntu | goldendict | 20.04 | 1.5.0~rc2+git20181207+ds-1 | vulnerable |
| Ubuntu | goldendict | 20.04 | 1.5.0~rc2+git20190930+ds-1 | vulnerable |
| Ubuntu | goldendict | 20.04 | 1.5.0~rc2+git20190930+ds-2 | vulnerable |
| Ubuntu | goldendict | 22.04 | 1.5.0~rc2+git20200409+ds-2 | vulnerable |
| Ubuntu | goldendict | 22.04 | 1.5.0~rc2+git20210630+ds-2 | vulnerable |
| Ubuntu | goldendict | 24.04 | 1.5.0-1build1 | vulnerable |
| Ubuntu | goldendict | 24.04 | 1.5.0-1build3 | vulnerable |
| Ubuntu | goldendict | 24.04 | 1.5.0-1build4 | vulnerable |
Fixed-version evidence
OpenFactory catalog packages
No matching packages in this catalog.
Observed: