CVE-2025-7776CWE-119

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

High · published August 26, 2025

CVSS v4.0
8.8
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

⚡ A memory overflow vulnerability in NetScaler ADC and Gateway could lead to unexpected behavior or even a Denial of Service! 🚨 Think of it like overfilling a soda can — once it spills over, chaos ensues! Similarly, this overflow can disrupt your VPN service and send your users into a frenzy when they can’t connect. An attacker could exploit this vulnerability to trigger erratic performance or crash the VPN service entirely, leaving users unable to access critical resources. This could have serious implications for businesses relying on stable connections, leading to productivity loss and frustrated employees!

Put simply

Think of it like overfilling a soda can — once it spills over, chaos ensues! Similarly, this overflow can disrupt your VPN service and send your users into a frenzy when they can’t connect. This memory overflow vulnerability occurs when the NetScaler is configured with a PCoIP Profile, causing it to behave unpredictably or crash under certain conditions. It can particularly affect VPN virtual servers, which are crucial for remote access.

What to do

An attacker could exploit this vulnerability to trigger erratic performance or crash the VPN service entirely, leaving users unable to access critical resources. This could have serious implications for businesses relying on stable connections, leading to productivity loss and frustrated employees! To mitigate this risk, ensure you're running the latest version of NetScaler, and apply any available patches as soon as possible. Regularly review your configurations to minimize exposure to this vulnerability. You've got this! With a quick patch and some vigilance, you'll keep your network running smoothly and protect your users. 🛡️

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L
EPSS
0.08213 · 94.9th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-08-26T13:03Z
EPSS history
Timeline
  • 26 AUG 13:03Z
    Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
    cvelistv5