CVE-2025-49163 | Arris VIP1113 up to 2025-05-30 KreaTV SDK /usr/bin/gunzip improper protection of alternate path

A vulnerability was found in Arris VIP1113 up to 2025-05-30. It has been rated as critical. Affected by this issue is some unknown functionality of the file /usr/bin/gunzip of the component KreaTV SDK. The manipulation leads to improper protection of alternate path.

This vulnerability is handled as CVE-2025-49163. It is possible to launch the attack on the local host. There is no exploit available.