CVE-2025-53814

High · 7.8

CVSS

7.8

EPSS

0.3%

Published

Oct 28, 2025

CISA due date

—

The record

A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. Fade In 4.2.0. A specially crafted .xml file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability.

Affected packages

Ecosystem	Package	Introduced	Fixed