CVE-2025-21176

Name of the Vulnerable Software and Affected Versions .NET versions prior to the version with Diasymreader.dll 14.8.9294.0 .NET Framework versions prior to the version with Mscorlib.dll 4.8.4775.0 Visual Studio versions prior to the version with updated Diasymreader.dll and Mscorlib.dll

Description The issue allows remote attackers to execute arbitrary code and affect the system. It is related to a buffer overflow in memory, where exploitation can allow a remote attacker to execute arbitrary code. The vulnerability is associated with the .NET Framework, .NET, and Microsoft Visual Studio.

Recommendations .NET versions prior to the version with Diasymreader.dll 14.8.9294.0: Update to a version with Diasymreader.dll 14.8.9294.0 or later. .NET Framework versions prior to the version with Mscorlib.dll 4.8.4775.0: Update to a version with Mscorlib.dll 4.8.4775.0 or later. Visual Studio versions prior to the version with updated Diasymreader.dll and Mscorlib.dll: Update to a version with the latest security patches, including updated Diasymreader.dll and Mscorlib.dll.