Medium
mapnik — security advisory
A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
- Products
- mapnik
- Affected versions
- 3.0.15+ds-1, 3.0.15+ds-2ubuntu2, 3.0.15+ds-3build1, 3.0.17+ds-1, 3.0.17+ds-1build1, 3.0.18+ds-1, 3.0.19+ds-1, 3.0.22+ds-2, 3.0.22+ds1-1, 3.0.22+ds1-1build1, 3.0.22+ds1-1build2, 3.0.23+ds-1, 3.0.23+ds-1build1, 3.0.3+ds-1, 3.0.8+ds-1ubuntu1, 3.0.9+ds-1, 3.1.0+ds-1, 3.1.0+ds-1build2, 3.1.0+ds-1ubuntu2, 3.1.0+ds-4, 3.1.0+ds-4build1, 3.1.0+ds-5, 3.1.0+ds-5build1, 3.1.0+ds-7ubuntu1, 3.1.0+ds-7ubuntu2, 4.0.5+ds-1, 4.0.7+ds-1build1, 4.0.7+ds-1build4, 4.1.3+ds-2build1, 4.1.4+ds-1, 4.1.4+ds-1build1, 4.1.4+ds-1build2, 4.2.0+ds-1, 4.2.1+ds-1, 4.2.1+ds-1ubuntu1, 4.2.1+ds-2, 4.2.2+ds-1, 4.2.2+ds-1build1, 4.3.0+ds2-1
- Fixed versions
- Not specified
- CVEs
- CVE-2025-15564
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 01:25 UTC · Revision 1
Source evidence
A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
osv:UBUNTU-CVE-2025-15564
mapnik
Fixed versions: Not specified
mapnik
Fixed versions: Not specified
mapnik
Fixed versions: Not specified
mapnik
Fixed versions: Not specified
mapnik
Fixed versions: Not specified
mapnik
Fixed versions: Not specified
mapnik
Fixed versions: Not specified
mapnik
Fixed versions: Not specified
Complete source record
{
"id": "9e08aaed88e2cfe93a2b8784afdbd70da0846181eeecaf0ab28e01eca3456279",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2025-15564",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2025-15564",
"summary": "A vulnerability has been found in Mapnik up to 4.2.0. This vulnerability affects the function mapnik::detail::mod<...>::operator of the file src/value.cpp. The manipulation leads to divide by zero. The attack needs to be performed locally. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.",
"evidence": "osv:UBUNTU-CVE-2025-15564",
"products": [
{
"name": {
"value": "mapnik",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.0.3+ds-1",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.8+ds-1ubuntu1",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.9+ds-1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "mapnik",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.0.15+ds-1",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.15+ds-2ubuntu2",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.15+ds-3build1",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.17+ds-1",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.17+ds-1build1",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.18+ds-1",
"evidence": "/affected/1/versions"
},
{
"value": "3.0.19+ds-1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "mapnik",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.0.22+ds-2",
"evidence": "/affected/2/versions"
},
{
"value": "3.0.22+ds1-1",
"evidence": "/affected/2/versions"
},
{
"value": "3.0.22+ds1-1build1",
"evidence": "/affected/2/versions"
},
{
"value": "3.0.22+ds1-1build2",
"evidence": "/affected/2/versions"
},
{
"value": "3.0.23+ds-1",
"evidence": "/affected/2/versions"
},
{
"value": "3.0.23+ds-1build1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "mapnik",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1.0+ds-1",
"evidence": "/affected/3/versions"
},
{
"value": "3.1.0+ds-1build2",
"evidence": "/affected/3/versions"
},
{
"value": "3.1.0+ds-1ubuntu2",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "mapnik",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.1.0+ds-4",
"evidence": "/affected/4/versions"
},
{
"value": "3.1.0+ds-4build1",
"evidence": "/affected/4/versions"
},
{
"value": "3.1.0+ds-5",
"evidence": "/affected/4/versions"
},
{
"value": "3.1.0+ds-5build1",
"evidence": "/affected/4/versions"
},
{
"value": "3.1.0+ds-7ubuntu1",
"evidence": "/affected/4/versions"
},
{
"value": "3.1.0+ds-7ubuntu2",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "mapnik",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.0.5+ds-1",
"evidence": "/affected/5/versions"
},
{
"value": "4.0.7+ds-1build1",
"evidence": "/affected/5/versions"
},
{
"value": "4.0.7+ds-1build4",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "mapnik",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.2.1+ds-2",
"evidence": "/affected/6/versions"
},
{
"value": "4.2.2+ds-1",
"evidence": "/affected/6/versions"
},
{
"value": "4.2.2+ds-1build1",
"evidence": "/affected/6/versions"
},
{
"value": "4.3.0+ds2-1",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "mapnik",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.0.7+ds-1build4",
"evidence": "/affected/7/versions"
},
{
"value": "4.1.3+ds-2build1",
"evidence": "/affected/7/versions"
},
{
"value": "4.1.4+ds-1",
"evidence": "/affected/7/versions"
},
{
"value": "4.1.4+ds-1build1",
"evidence": "/affected/7/versions"
},
{
"value": "4.1.4+ds-1build2",
"evidence": "/affected/7/versions"
},
{
"value": "4.2.0+ds-1",
"evidence": "/affected/7/versions"
},
{
"value": "4.2.1+ds-1",
"evidence": "/affected/7/versions"
},
{
"value": "4.2.1+ds-1ubuntu1",
"evidence": "/affected/7/versions"
},
{
"value": "4.2.1+ds-2",
"evidence": "/affected/7/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2025-15564",
"aliases": [
"UBUNTU-CVE-2025-15564"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mapnik",
"purl": "pkg:deb/ubuntu/mapnik?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"3.0.3+ds-1",
"3.0.8+ds-1ubuntu1",
"3.0.9+ds-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-15564.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmapnik3.0",
"binary_version": "3.0.9+ds-1"
},
{
"binary_name": "mapnik-utils",
"binary_version": "3.0.9+ds-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mapnik",
"purl": "pkg:deb/ubuntu/mapnik?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"3.0.15+ds-1",
"3.0.15+ds-2ubuntu2",
"3.0.15+ds-3build1",
"3.0.17+ds-1",
"3.0.17+ds-1build1",
"3.0.18+ds-1",
"3.0.19+ds-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-15564.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmapnik3.0",
"binary_version": "3.0.19+ds-1"
},
{
"binary_name": "mapnik-utils",
"binary_version": "3.0.19+ds-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mapnik",
"purl": "pkg:deb/ubuntu/mapnik?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"3.0.22+ds-2",
"3.0.22+ds1-1",
"3.0.22+ds1-1build1",
"3.0.22+ds1-1build2",
"3.0.23+ds-1",
"3.0.23+ds-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-15564.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmapnik3.0",
"binary_version": "3.0.23+ds-1build1"
},
{
"binary_name": "mapnik-utils",
"binary_version": "3.0.23+ds-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mapnik",
"purl": "pkg:deb/ubuntu/mapnik?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"3.1.0+ds-1",
"3.1.0+ds-1build2",
"3.1.0+ds-1ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-15564.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmapnik3.1",
"binary_version": "3.1.0+ds-1ubuntu2"
},
{
"binary_name": "mapnik-utils",
"binary_version": "3.1.0+ds-1ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mapnik",
"purl": "pkg:deb/ubuntu/mapnik?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"3.1.0+ds-4",
"3.1.0+ds-4build1",
"3.1.0+ds-5",
"3.1.0+ds-5build1",
"3.1.0+ds-7ubuntu1",
"3.1.0+ds-7ubuntu2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-15564.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmapnik3.1t64",
"binary_version": "3.1.0+ds-7ubuntu2"
},
{
"binary_name": "mapnik-utils",
"binary_version": "3.1.0+ds-7ubuntu2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mapnik",
"purl": "pkg:deb/ubuntu/mapnik?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"4.0.5+ds-1",
"4.0.7+ds-1build1",
"4.0.7+ds-1build4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-15564.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmapnik4.0",
"binary_version": "4.0.7+ds-1build4"
},
{
"binary_name": "mapnik-utils",
"binary_version": "4.0.7+ds-1build4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mapnik",
"purl": "pkg:deb/ubuntu/mapnik?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"4.2.1+ds-2",
"4.2.2+ds-1",
"4.2.2+ds-1build1",
"4.3.0+ds2-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-15564.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmapnik4.3",
"binary_version": "4.3.0+ds2-1"
},
{
"binary_name": "mapnik-utils",
"binary_version": "4.3.0+ds2-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mapnik",
"purl": "pkg:deb/ubuntu/mapnik?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"4.0.7+ds-1build4",
"4.1.3+ds-2build1",
"4.1.4+ds-1",
"4.1.4+ds-1build1",
"4.1.4+ds-1build2",
"4.2.0+ds-1",
"4.2.1+ds-1",
"4.2.1+ds-1ubuntu1",
"4.2.1+ds-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-15564.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "libmapnik4.2",
"binary_version": "4.2.1+ds-2"
},
{
"binary_name": "mapnik-utils",
"binary_version": "4.2.1+ds-2"
}
]
}
}
],
"modified": "2026-10-17T12:56:48.336281723Z",
"provider": "osv",
"upstream": [
"CVE-2025-15564"
],
"references": [
"https://ubuntu.com/security/CVE-2025-15564",
"https://www.cve.org/CVERecord?id=CVE-2025-15564",
"https://github.com/mapnik/mapnik/issues/4545",
"https://github.com/mapnik/mapnik/",
"https://github.com/oneafter/1219/blob/main/repro",
"https://vuldb.com/?ctiid.344502",
"https://vuldb.com/?id.344502",
"https://vuldb.com/?submit.743386"
]
},
"related_cves": [
{
"value": "CVE-2025-15564",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/1/score"
},
"source_id": "core-osv",
"document_id": 356329,
"published_at": "2026-02-07T22:16:00+00:00"
}