CVE-2025-7776

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

State: Published
Severity: 8.8 High
Published: Aug 26, 2025
Updated: Aug 27, 2025
Reserved: Jul 17, 2025

Description

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it

Scores

CVSS	Score	Vector	Source
4.0	8.8 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L	Citrix

Weaknesses

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

Product	Versions
ADCNetScaler	14.1 to before 47.48Affected 13.1 to before 59.22Affected 13.1 FIPS and NDcPP to before 37.241Affected 12.1 FIPS and NDcPP to before 55.330Affected
GatewayNetScaler	14.1 to before 47.48Affected 13.1 to before 59.22Affected 13.1 FIPS and NDcPP to before 37.241Affected 12.1 FIPS and NDcPP to before 55.330Affected

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.