CVE-2025-25249
Modified
Modified - Updated After Analysis
Heap-Based Buffer Overflow in Fortinet FortiOS Enables Code Execution
Vulnerability report for CVE-2025-25249, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-01-13
Last updated on: 2026-06-09
Assigner: Fortinet, Inc.
Description
Description
A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| fortinet | fortios | From 7.6.0 (inc) to 7.6.3 (inc) |
| fortinet | fortios | From 7.4.0 (inc) to 7.4.8 (inc) |
| fortinet | fortios | From 7.2.0 (inc) to 7.2.11 (inc) |
| fortinet | fortios | From 7.0.0 (inc) to 7.0.17 (inc) |
| fortinet | fortios | From 6.4.0 (inc) to 6.4.16 (inc) |
| fortinet | fortisase | 25.2.b |
| fortinet | fortisase | 25.1.a.2 |
| fortinet | fortiswitchmanager | From 7.2.0 (inc) to 7.2.6 (inc) |
| fortinet | fortiswitchmanager | From 7.0.0 (inc) to 7.0.5 (inc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-122 | A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). |
