CVE-2025-41732
Published: 10 December 2025
Description
An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.
Mitigating Controls (NIST 800-53 r5)AI
Directly remediates the unsafe sscanf calls causing stack buffer overflows by identifying, patching, and verifying fixes for this specific flaw.
Implements memory safeguards such as stack canaries, ASLR, and DEP to prevent arbitrary code execution from stack buffer overflows even if exploitation occurs.
Validates incoming cookie inputs prior to processing by check_cookie() to block malformed data that could trigger the sscanf buffer overflow.
Security SummaryAI
CVE-2025-41732, published on 2025-12-10, is a critical vulnerability (CVSS 9.8) stemming from unsafe sscanf calls in the check_cookie() function. These calls enable writing arbitrary data into fixed-size stack buffers, resulting in full device compromise. It is associated with CWE-121 (stack-based buffer overflow) and CWE-787 (out-of-bounds write), affecting an unspecified software component or device that exposes this function.
An unauthenticated remote attacker can exploit this vulnerability over the network with low attack complexity and no user interaction or privileges required. Successful exploitation grants high-impact access to confidentiality, integrity, and availability, culminating in complete device takeover as described.
The primary advisory reference, available at https://certvde.com/de/advisories/VDE-2025-095, provides further details on this issue, including potential mitigation guidance.
Details
- CWE(s)
Affected Products
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Unauthenticated remote buffer overflow vulnerability enables arbitrary code execution and full device compromise over the network, directly facilitating T1190: Exploit Public-Facing Application.