4.8 Medium

CVE-2025-25248 An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below,…

Description

An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests.

Affected products and versions

Product	Affected versions	Fixed in
FortiOS 7.6	7.6.0 → 7.6.2	No fix stated
FortiOS 7.4	7.4.0 → 7.4.7	No fix stated
FortiOS 7.2	7.2.0 → 7.2.10	No fix stated
FortiOS 7.0	7.0.0 → 7.0.17	No fix stated
FortiOS 6.4	6.4.0 → 6.4.16	No fix stated
FortiPAM	1.5.0	No fix stated
FortiPAM 1.4	1.4.0 → 1.4.2	No fix stated
FortiPAM 1.3	1.3.0 → 1.3.1	No fix stated
FortiPAM	1.2.0	No fix stated

Show the 8 other branches

Product	Affected versions	Fixed in
FortiPAM 1.1	1.1.0 → 1.1.2	No fix stated
FortiPAM 1.0	1.0.0 → 1.0.3	No fix stated
FortiProxy 7.6	7.6.0 → 7.6.2	No fix stated
FortiProxy 7.4	7.4.0 → 7.4.3	No fix stated
FortiProxy 7.2	7.2.0 → 7.2.14	No fix stated
FortiProxy 7.0	7.0.0 → 7.0.21	No fix stated
FortiProxy 2.0	2.0.0 → 2.0.14	No fix stated
RUGGEDCOM APE1808	Versions not published