一、 漏洞 CVE-2025-47868 基础信息
漏洞信息
                                        神龙正在分析中.
提示
尽管我们采用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。
神龙会尽力确保数据准确，但也请结合实际情况进行甄别与判断。
神龙祝您一切顺利！
漏洞标题
Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.
来源：美国国家漏洞数据库 NVD
漏洞描述信息
Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part of Apache NuttX RTOS repository. This standalone program is optional and neither part of NuttX RTOS nor Applications runtime, but active bdf-converter users may be affected when this tool is exposed to external provided user data data (i.e. publicly available automation). This issue affects Apache NuttX: from 6.9 before 12.9.0. Users are recommended to upgrade to version 12.9.0, which fixes the issue.
来源：美国国家漏洞数据库 NVD
CVSS信息
N/A
来源：美国国家漏洞数据库 NVD
漏洞类别
跨界内存写
来源：美国国家漏洞数据库 NVD
二、漏洞 CVE-2025-47868 的公开POC
# POC 描述 源链接 神龙链接
三、漏洞 CVE-2025-47868 的情报信息

  • 标题： tools/bdf-converter: Fix loop termination condition. by cederom · Pull Request #16000 · apache/nuttx · GitHub -- 🔗来源链接

    标签： patch

    神龙速读
    tools/bdf-converter: Fix loop termination condition. by cederom · Pull Request #16000 · apache/nuttx · GitHub

  • 标题： CVE-2025-47868: Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.-Apache Mail Archives -- 🔗来源链接

    标签： vendor-advisory

    神龙速读
    CVE-2025-47868: Apache NuttX RTOS: tools/bdf-converter.: tools/bdf-converter: Fix loop termination condition.-Apache Mail Archives
  • https://nvd.nist.gov/vuln/detail/CVE-2025-47868