CVE-2025-7776
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-08-26
Last updated on: 2025-09-03
Assigner: Citrix Systems, Inc.
Description
Description
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| citrix | netscaler_application_delivery_controller | From 12.1 (inc) to 12.1-55.330 (exc) |
| citrix | netscaler_application_delivery_controller | From 12.1 (inc) to 12.1-55.330 (exc) |
| citrix | netscaler_application_delivery_controller | From 13.1 (inc) to 13.1-37.241 (exc) |
| citrix | netscaler_application_delivery_controller | From 13.1 (inc) to 13.1-37.241 (exc) |
| citrix | netscaler_application_delivery_controller | From 13.1 (inc) to 13.1-59.22 (exc) |
| citrix | netscaler_application_delivery_controller | From 14.1 (inc) to 14.1-47.48 (exc) |
| citrix | netscaler_gateway | From 13.1 (inc) to 13.1-59.22 (exc) |
| citrix | netscaler_gateway | From 14.1 (inc) to 14.1-47.48 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-119 | The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data. |
