PT-2025-1111

CVE-2025-21172

·

Published

2025-01-14

·

Updated

2026-09-18

Description by

CVSS 2.0
7.6
High
MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions .NET and Visual Studio (affected versions not specified)
Description The issue is related to a buffer overflow in dynamic memory, which can allow a remote attacker to execute arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-122: Heap-based Buffer Overflow
CWE-190: Integer Overflow or Wraparound
Related identifiers
CVE-2025-21172
BDU:2025-00367
BDU:2025-12582
GHSA-JJCV-WR2G-4RV4
ALSA-2025:0381
ALSA-2025:0382
ALT-PU-2025-13074
ALT-PU-2025-13075
ALT-PU-2025-5283
BIT-DOTNET-2025-21172
BIT-DOTNET-2025-36853
BIT-DOTNET-SDK-2025-21172
BIT-DOTNET-SDK-2025-36853
CESA-2025_0381
CESA-2025_0382
INFBA-2025_0304
INFBA-2025_0305
INFSA-2025_0381
INFSA-2025_0382
RHSA-2025:0381
RHSA-2025_0381
RHSA-2025:0382
RHSA-2025_0382
RHSA-2025:0532
RLSA-2025:0381
RLSA-2025:0382
USN-7210-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com