How severe is CVE-2025-4637?

CVE-2025-4637 has a CVSS 4.0 base score of 8.7, rated high severity.

Is CVE-2025-4637 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.

How do I fix CVE-2025-4637?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2025-4637 have an EU (EUVD) identifier?

Yes. CVE-2025-4637 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-14923.

When was CVE-2025-4637 published?

CVE-2025-4637 was published on 2025-05-14 and last updated on 2026-06-17.

CVE-2025-4637

CVE-2025-4637 is a high-severity vulnerability with a CVSS 4.0 base score of 8.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-369.

Key facts

Severity: High (CVSS 4.0 base score 8.7)
EPSS exploit prediction: 0% (31st percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-14923
Weakness: CWE-369
Published: 2025-05-14
Last modified: 2026-06-17

Description

Divide By Zero vulnerability in davisking dlib allows remote attackers to cause a denial of service via a crafted file. .This issue affects dlib: before <19.24.7.

Frequently asked questions

What is CVE-2025-4637?: Divide By Zero vulnerability in davisking dlib allows remote attackers to cause a denial of service via a crafted file. .This issue affects dlib: before <19.24.7.
How severe is CVE-2025-4637?: CVE-2025-4637 has a CVSS 4.0 base score of 8.7, rated high severity.
Is CVE-2025-4637 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.
How do I fix CVE-2025-4637?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2025-4637 have an EU (EUVD) identifier?: Yes. CVE-2025-4637 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-14923.
When was CVE-2025-4637 published?: CVE-2025-4637 was published on 2025-05-14 and last updated on 2026-06-17.

References

https://github.com/davisking/dlib/pull/3058

Other CWE-369 (Divide By Zero) vulnerabilities

CVE-2021-32494 — Critical (CVSS 10.0): Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create…
CVE-2017-11720 — Critical (CVSS 9.8): There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.
CVE-2020-20892 — High (CVSS 8.8): An issue was discovered in function filter_frame in libavfilter/vf_lenscorrection.c in Ffmpeg 4.2.1, allows attackers…
CVE-2026-37232 — High (CVSS 8.6): An issue was discovered in OpenAirInterface5G 2.4.0 (nr-softmodem) in the E2SM-KPM RAN Function's PRB utilization…
CVE-2024-26945 — High (CVSS 8.4): In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - Fix nr_cpus < nr_iaa case If…
CVE-2023-3896 — High (CVSS 7.8): Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3

Browse all CWE-369 (Divide By Zero) vulnerabilities →