CVE-2025-57740

An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests.

Scoring

Severity

MEDIUM

CVSS base score

6.7

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

EPSS probability

0.68%

CWE

CWE-122

Published

2025-10-14

Last modified

2026-08-11

Affected products

• Fortinet FortiPAM
• Fortinet FortiPAM
• Fortinet FortiPAM
• Fortinet FortiPAM
• Fortinet FortiPAM
• Fortinet FortiPAM
• Fortinet FortiProxy
• Fortinet FortiProxy

Weakness type

• CWE-122

Related vulnerabilities

• CVE-2026-78948 — Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code out
• CVE-2026-87654 — Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbi
• CVE-2026-87527 — Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code out
• CVE-2026-79130 — Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code out
• CVE-2026-17758 — Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a
• CVE-2026-17680 — Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had comp
• CVE-2026-87579 — Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code in
• CVE-2026-87430 — Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbit

Markdown version · Browse all CVEs