---
id: CVE-2025-25248
title: "An\_Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and be…"
summary: "An\_Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and be…"
severity: medium
cvss: 4.8
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:R'
cvssSource: cna
cwe:
  - CWE-190
vendor: Fortinet
product: FortiOS
affected:
  - FortiOS >= 7.6.0 <= 7.6.2
  - FortiOS >= 7.4.0 <= 7.4.7
  - FortiOS >= 7.2.0 <= 7.2.10
  - FortiOS >= 7.0.0 <= 7.0.17
  - FortiOS >= 6.4.0 <= 6.4.16
  - FortiPAM 1.5.0
  - FortiPAM >= 1.4.0 <= 1.4.2
  - FortiPAM >= 1.3.0 <= 1.3.1
  - FortiPAM 1.2.0
  - FortiPAM >= 1.1.0 <= 1.1.2
  - FortiPAM >= 1.0.0 <= 1.0.3
  - FortiProxy >= 7.6.0 <= 7.6.2
  - FortiProxy >= 7.4.0 <= 7.4.3
  - FortiProxy >= 7.2.0 <= 7.2.14
  - FortiProxy >= 7.0.0 <= 7.0.21
  - FortiProxy >= 2.0.0 <= 2.0.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-08-13T19:54:27.772972Z'
published: '2025-08-12'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:05:47.671Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-25248'
references:
  - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-24-364'
    label: 'https://fortiguard.fortinet.com/psirt/FG-IR-24-364'
tags:
  - cve.org
epss: 0.00485
epssPercentile: 0.40219
ingestedAt: '2026-10-15T05:52:46.102Z'
---

## Overview

An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests.

## Affected

- `FortiOS >= 7.6.0 <= 7.6.2`
- `FortiOS >= 7.4.0 <= 7.4.7`
- `FortiOS >= 7.2.0 <= 7.2.10`
- `FortiOS >= 7.0.0 <= 7.0.17`
- `FortiOS >= 6.4.0 <= 6.4.16`
- `FortiPAM 1.5.0`
- `FortiPAM >= 1.4.0 <= 1.4.2`
- `FortiPAM >= 1.3.0 <= 1.3.1`
- `FortiPAM 1.2.0`
- `FortiPAM >= 1.1.0 <= 1.1.2`
- `FortiPAM >= 1.0.0 <= 1.0.3`
- `FortiProxy >= 7.6.0 <= 7.6.2`
- `FortiProxy >= 7.4.0 <= 7.4.3`
- `FortiProxy >= 7.2.0 <= 7.2.14`
- `FortiProxy >= 7.0.0 <= 7.0.21`
- `FortiProxy >= 2.0.0 <= 2.0.14`

## Remediation

Please upgrade to FortiOS version 7.6.3 or above 
Please upgrade to FortiOS version 7.4.8 or above 
Please upgrade to FortiOS version 7.2.11 or above 
Please upgrade to FortiPAM version 1.5.1 or above 
Please upgrade to FortiPAM version 1.4.3 or above 
Please upgrade to FortiProxy version 7.6.3 or above 
Please upgrade to FortiProxy version 7.4.4 or above