CVE-2025-47295

LowCVSS 3.7/10Last modified Jun 17, 2026

Description

A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's control.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness enumeration

CWE-126 CWE-125

Affected software

No affected versions have been published.

Timeline

Published: May 28, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-47308.8A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been rated as critical. Affected by this issue is some CVE-2025-47318.8A vulnerability classified as critical has been found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This affects an unknown part of t CVE-2025-473147.8Memory corruption while processing data sent by FE driver.CVE-2025-473157.8Memory corruption while handling repeated memory unmap requests from guest VM.CVE-2025-473167.8Memory corruption due to double free when multiple threads race to set the timestamp store.CVE-2025-473177.8Memory corruption due to global buffer overflow when a test command uses an invalid payload type.CVE-2025-473187.5Transient DOS while parsing the EPTM test control message to get the test pattern.CVE-2025-473196.7Information disclosure while exposing internal TA-to-TA communication APIs to HLOS CVE-2025-47328.8A vulnerability classified as critical was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. This vulnerability affects unknown cod CVE-2025-473207.8Memory corruption while processing MFC channel configuration during music playback.CVE-2025-473217.8Memory corruption while copying packets received from unix clients.CVE-2025-473227.8Memory corruption while handling IOCTL calls to set mode.