CVE-2025-47321CWE-120

Buffer Copy Without Checking Size of Input in Core Services

High · published December 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
0.2
In the wild
Unconfirmed
What it is

⚡ A wayward packet could lead to troublesome memory corruption, leaving your system vulnerable to chaos! Think of it like a restaurant where the chef accidentally uses expired ingredients while preparing a dish — it can lead to disastrous results for everyone at the table! 🍽️ An attacker could potentially exploit this weakness to crash services, destabilize systems, or execute arbitrary code — effectively turning your reliable server into a ticking time bomb. The consequences can be absolutely devastating for your operations!

Put simply

Think of it like a restaurant where the chef accidentally uses expired ingredients while preparing a dish — it can lead to disastrous results for everyone at the table! 🍽️ This vulnerability arises from improper handling of packet data received from Unix clients, which can cause memory corruption and unpredictable behavior during processing.

What to do

An attacker could potentially exploit this weakness to crash services, destabilize systems, or execute arbitrary code — effectively turning your reliable server into a ticking time bomb. The consequences can be absolutely devastating for your operations! To protect yourself, ensure you update to the latest version that addresses this issue as soon as possible. Additionally, consider adding input validation and sanitization to your processes to further shield against this type of attack. You've got this! Follow these steps, and your defenses will be stronger than ever! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00081 · 0.2th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2025-12-18T05:29Z
EPSS history
Timeline
  • 18 DEC 05:29Z
    Buffer Copy Without Checking Size of Input in Core Services
    cvelistv5