What is GHSA-mj8x-m8f5-x4w8?

GHSA-mj8x-m8f5-x4w8 is a security advisory published by GitHub Security Advisories with High severity. A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0...

Which CVE IDs does GHSA-mj8x-m8f5-x4w8 cover?

GHSA-mj8x-m8f5-x4w8 covers the following CVE IDs: CVE-2025-25249. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-mj8x-m8f5-x4w8?

GHSA-mj8x-m8f5-x4w8 has a CVSS v3 base score of 8.1, published by GitHub Security Advisories.

GHSA-mj8x-m8f5-x4w8HighCVSS 8.1

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0...

Vendor

GitHub Security Advisories

Published

January 13, 2026

Last Modified

June 9, 2026

🔗 CVE IDs covered (1)

CVE-2025-25249 →

📋 Description

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4.0 through 6.4.16, FortiSASE 25.2.b, FortiSASE 25.1.a.2, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-25249
https://fortiguard.fortinet.com/psirt/FG-IR-25-084
https://cert-portal.siemens.com/productcert/html/ssa-864900.html
https://github.com/advisories/GHSA-mj8x-m8f5-x4w8