CVE-2025-25066 – Cisco nDPI Stack Buffer Overflow Vulnerability
The following table lists the changes that have been made to the CVE-2025-25066 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics.
-
New CVE Received by [email protected]
Feb. 03, 2025
Action Type Old Value New Value Added Description nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c. Added CVSS V3.1 AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Added CWE CWE-121 Added Reference https://github.com/ntop/nDPI/commit/678697b5eb6c3caa5dd5f8cccfe9eed8d13b94bb