CVE-2025-67841

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-407

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Apr 15, 2026
Last modified
Jun 17, 2026
NVD status
Awaiting Analysis

Related CVEs from 2025

CVE-2025-678425.4The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomainCVE-2025-678439.8A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attacCVE-2025-678444.3The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the reCVE-2025-678455.4A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to injCVE-2025-678466.5The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgradCVE-2025-678478.8A flaw was found in Moodle. An attacker with access to the restore interface could trigger server-side execution of arbitrary code. This is CVE-2025-678488.1A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools InterCVE-2025-678496.1A flaw was found in Moodle. This cross-site scripting (XSS) vulnerability, caused by improper sanitization of AI prompt responses, allows atCVE-2025-67854.7Securing externally available CAN wires can easily allow physical access to the CAN bus, allowing possible injection of specially formed CANCVE-2025-678506.1A flaw was found in moodle. This vulnerability, known as Cross-Site Scripting (XSS), occurs due to insufficient checks on user-provided dataCVE-2025-678517.8A flaw was found in moodle. This formula injection vulnerability occurs when data fields are exported without proper escaping. A remote attaCVE-2025-678526.1A flaw was found in Moodle. An open redirect vulnerability in the OAuth login flow allows a remote attacker to redirect users to attacker-co
CVE-2025-67841: High severity, CVSS 7.5 | Vulnix