CVE-2025-12056CWE-125

CVE-2025-12056

published November 19, 2025

CVSS

8.3

EPSS

0%

Percentile

8.5

In the wild

Unconfirmed

What it is

Out-of-bounds Read in Shelly Pro 3EM (before v1.4.4) allows Overread Buffers.

The record

Technical detail

CVSS: 8.3 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00193 · 8.5th percentile
Weakness: CWE-125 · Out-of-bounds Read
Published: 2025-11-19T12:15Z

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-25-322-03 · [email protected]https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2025-12056 · [email protected]

EPSS history

Timeline

19 NOV 06:46Z
Out-of-bounds Read in Shelly Pro 3EM
cvelistv5