CVE-2025-6543

Memory overflow vulnerability leading to unintended control flow and Denial of Service

State: Published
Severity: 9.2 Critical
Published: Jun 25, 2025
Updated: Feb 26, 2026
Reserved: Jun 23, 2025

Description

Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Scores

CVSS	Score	Vector	Source
4.0	9.2 Critical	CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L	Citrix

Weaknesses

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

Product	Versions
ADCNetScaler	14.1 to before 47.46Affected 13.1 to before 59.19Affected 13.1 FIPS and NDcPP to before 37.236Affected
GatewayNetScaler	14.1 to before 47.46Affected 13.1 to before 59.19Affected 13.1 FIPS and NDcPP to before 37.236Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.