EXPOSURES › CVE-2025-67896
CVE-2025-67896
HIGH
DETAIL
SourceNVD · cve
Published2025-12-14
CVSS7.0
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-67896 ↗
▸ RECOMMENDED ACTION Patch the affected products and confirm your instances are covered.
PLAYERS IMPLICATED
DESCRIPTION
Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow because database records are cast directly to internal structures without validation.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.