CVE-2025-45663

Medium · 6.5

CVSS

6.5

EPSS

0.4%

Published

Nov 3, 2025

CISA due date

—

The record

An issue in NetSurf v3.11 causes the application to read uninitialized heap memory when creating a dom_event structure.

Ecosystem	Package	Introduced	Fixed