CVE-2025-45663: Medium severity NetSurf NetSurf vulnerability
Published Nov 3, 2025
·Updated
An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a domevent structure.
Affected Software
2 affected components
NetSurf NetSurf
Netsurf-browser Netsurf=3.11
Event History
Nov 3, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-45663?
CVE-2025-45663 is rated as a medium severity vulnerability due to exposure of uninitialized heap memory.
2
How do I fix CVE-2025-45663?
To fix CVE-2025-45663, update to the latest version of NetSurf where the vulnerability has been addressed.
3
What are the potential risks of CVE-2025-45663?
CVE-2025-45663 could potentially lead to memory disclosure, impacting user data privacy.
4
Which versions of NetSurf are affected by CVE-2025-45663?
CVE-2025-45663 affects NetSurf version 3.11; later versions should be checked for mitigation.
5
Is there a workaround for CVE-2025-45663 until a patch is available?
Currently, there are no known effective workarounds for CVE-2025-45663; upgrading is the recommended action.