Vulnerabilities > CVE-2025-32756 - Stack-based Buffer Overflow vulnerability in Fortinet products

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

fortinet

CWE-121

critical

NVD

Published: 2025-05-13

Updated: 2025-05-16

Summary

A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7.2.0, 7.0.0 through 7.0.6, 6.4.0 through 6.4.10, FortiRecorder versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.5, 6.4.0 through 6.4.5, FortiMail versions 7.6.0 through 7.6.2, 7.4.0 through 7.4.4, 7.2.0 through 7.2.7, 7.0.0 through 7.0.8, FortiNDR versions 7.6.0, 7.4.0 through 7.4.7, 7.2.0 through 7.2.4, 7.0.0 through 7.0.6, FortiCamera versions 2.1.0 through 2.1.3, 2.0 all versions, 1.1 all versions, allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.

Vulnerable Configurations

Part	Description	Count
Application	Fortinet Fortinet Fortindr 7.1.0 Fortinet Fortindr 7.0.0 Fortinet Fortindr 7.6.0 Fortinet Fortindr 7.4.0 Fortinet Fortindr 7.2.0 Fortinet Fortindr 7.2.1 Fortinet Fortindr 7.1.1 Fortinet Fortindr 1.5.0 Fortinet Fortindr 1.4.0 Fortinet Fortindr 1.3.0 Fortinet Fortindr 1.2.0 Fortinet Fortindr 1.1.0 Fortinet Fortimail 7.0.0 Fortinet Fortimail 7.0.1 Fortinet Fortimail 7.0.2 Fortinet Fortimail 7.0.3 Fortinet Fortimail 7.0.4 Fortinet Fortimail 7.0.5 Fortinet Fortimail 7.0.6 Fortinet Fortimail 7.0.7 Fortinet Fortimail 7.0.8 Fortinet Fortimail 7.2.0 Fortinet Fortimail 7.2.1 Fortinet Fortimail 7.2.2 Fortinet Fortimail 7.2.3 Fortinet Fortimail 7.2.4 Fortinet Fortimail 7.2.5 Fortinet Fortimail 7.2.6 Fortinet Fortimail 7.2.7 Fortinet Fortimail 7.4.0 Fortinet Fortimail 7.4.1 Fortinet Fortimail 7.4.2 Fortinet Fortimail 7.4.3 Fortinet Fortimail * Fortinet Fortirecorder 7.2.0 Fortinet Fortirecorder 7.2.1 Fortinet Fortirecorder 7.2.2 Fortinet Fortirecorder 7.0.0 Fortinet Fortirecorder 7.0.1 Fortinet Fortirecorder 7.0.2 Fortinet Fortirecorder 7.0.3 Fortinet Fortirecorder 7.0.4 Fortinet Fortirecorder 7.0.5 Fortinet Fortirecorder 6.4.0 Fortinet Fortirecorder 6.4.1 Fortinet Fortirecorder 6.4.2 Fortinet Fortirecorder 6.4.3 Fortinet Fortirecorder 6.4.4 Fortinet Fortirecorder 6.4.5 Fortinet Fortivoice 7.0.0 Fortinet Fortivoice 7.0.1 Fortinet Fortivoice 7.0.4 Fortinet Fortivoice 7.0.5 Fortinet Fortivoice 6.4.0 Fortinet Fortivoice 6.4.1 Fortinet Fortivoice 6.4.2 Fortinet Fortivoice 6.4.3 Fortinet Fortivoice 6.4.4 Fortinet Fortivoice 6.4.5 Fortinet Fortivoice 6.4.6 Fortinet Fortivoice 6.4.7 Fortinet Fortivoice 6.4.8 Fortinet Fortivoice 6.4.9 Fortinet Fortivoice 6.4.10 Fortinet Fortivoice 7.2.0	69
OS	Fortinet Fortinet Forticamera Firmware *	1
Hardware	Fortinet Fortinet Forticamera -	1

Common Weakness Enumeration (CWE)

CWE-121 - Stack-based Buffer Overflow

References

https://fortiguard.fortinet.com/psirt/FG-IR-25-254

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Related news

References