Stack-based buffer overflow in Fortinet, Inc products - CVE-2025-32756
Published: May 13, 2025 / Updated: June 13, 2025
Vulnerability identifier: #VU109101
CSH Severity: Critical
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-32756
CWE-ID: CWE-121
Exploitation vector: Remote access
Exploit availability:
The vulnerability is being exploited in the wild
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The vulnerability exists due to stack-based buffer overflow in API. A remote unauthenticated attacker can execute arbitrary code or commands via crafted HTTP requests.
Note, this vulnerability is being actively exploited in the wild against FortiVoice instances.
Affected software
FortiNDR
FortiMail
FortiCamera
FortiVoice
FortiRecorder
FortiMail
FortiCamera
FortiVoice
FortiRecorder
How to mitigate CVE-2025-32756
Install update from vendor's website.
FortiNDR - addressed in versions 7.0.7, 7.2.5, 7.4.8, 7.6.1
FortiCamera - update to 2.1.4
FortiVoice - addressed in versions 6.4.11, 7.0.7, 7.2.1
FortiRecorder - addressed in versions 6.4.6, 7.0.6, 7.2.4
FortiMail - addressed in versions 7.0.9, 7.2.8, 7.4.5, 7.6.3
FortiCamera - update to 2.1.4
FortiVoice - addressed in versions 6.4.11, 7.0.7, 7.2.1
FortiRecorder - addressed in versions 6.4.6, 7.0.6, 7.2.4
FortiMail - addressed in versions 7.0.9, 7.2.8, 7.4.5, 7.6.3