CVE-2025-7776
BaseFortify
Publication date: 2025-08-26
Last updated on: 2025-09-03
Assigner: Citrix Systems, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| citrix | netscaler_application_delivery_controller | From 12.1 (inc) to 12.1-55.330 (exc) |
| citrix | netscaler_application_delivery_controller | From 12.1 (inc) to 12.1-55.330 (exc) |
| citrix | netscaler_application_delivery_controller | From 13.1 (inc) to 13.1-37.241 (exc) |
| citrix | netscaler_application_delivery_controller | From 13.1 (inc) to 13.1-37.241 (exc) |
| citrix | netscaler_application_delivery_controller | From 13.1 (inc) to 13.1-59.22 (exc) |
| citrix | netscaler_application_delivery_controller | From 14.1 (inc) to 14.1-47.48 (exc) |
| citrix | netscaler_gateway | From 13.1 (inc) to 13.1-59.22 (exc) |
| citrix | netscaler_gateway | From 14.1 (inc) to 14.1-47.48 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a memory overflow issue in NetScaler ADC and NetScaler Gateway when configured as a Gateway (such as VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with a PCoIP Profile bound to it. The overflow can cause unpredictable or erroneous behavior and may lead to Denial of Service (DoS).
How can this vulnerability impact me? :
The vulnerability can cause unpredictable or erroneous behavior in the affected NetScaler systems and can result in Denial of Service, potentially disrupting network access and services relying on the NetScaler Gateway configured with PCoIP Profile.