CVE-2025-37178 PUBLISHED CVSS 5.300000190734863 MEDIUM

Multiple out-of-bounds read vulnerabilities were identified in a system component responsible for handling certain data buffers. Due to insufficient validation of maximum buffer size values, the process may attempt to read beyond the intended memory region. Under specific conditions, this can result in a crash of the affected process and a potential denial-of-service of the compromised process.

EPSS 0.06% · 19.5th percentile

Risk Scores

CVSS v3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.06%
19.5th percentile

Affected Products

VendorProductVersions
arubanetworksarubaos8.6.0.0, 8.11.0.0
Hewlett Packard Enterprise (HPE)ArubaOS (AOS)8.12.0.0, 8.10.0.0

Timeline

References

Open in Interactive Console →