{"id":"CVE-2025-26503","aliases":["EUVD-2025-30202","GHSA-fgv6-q36r-w652"],"status":"published","title":"Buffer manipulation","description":"A crafted system call argument can cause memory corruption.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00149,"percentile":0.04194,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2025-09-18T18:46:44Z","modified":"2026-06-17T09:01:55Z","products":[{"vendor":"wind river systems inc","product":"vxworks 7"}],"references":[{"url":"https://support2.windriver.com/index.php?page=cve\u0026on=view\u0026id=CVE-2025-26503"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-26503"},{"url":"https://github.com/advisories/GHSA-fgv6-q36r-w652"}],"sources":{"cve":[{"id":"CVE-2025-26503","title":"Buffer manipulation","description":"A crafted system call argument can cause memory corruption.","status":"published","published":"2025-09-18T18:46:44.962Z","modified":"2026-02-26T17:48:27.781Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:32:28.250136Z"}],"euvd":[{"id":"EUVD-2025-30202","description":"A crafted system call argument can cause memory corruption.","status":"published","published":"2025-09-18T18:46:44Z","modified":"2026-02-26T17:48:27Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T19:48:21.697838Z"}],"ghsa":[{"id":"GHSA-fgv6-q36r-w652","title":"A crafted system call argument can cause memory corruption.","description":"A crafted system call argument can cause memory corruption.","status":"published","published":"2025-09-18T21:30:56Z","modified":"2025-09-18T21:31:08Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:03:39.8276Z"}],"nvd":[{"id":"CVE-2025-26503","description":"A crafted system call argument can cause memory corruption.","status":"published","published":"2025-09-18T19:15:37.293Z","modified":"2026-06-17T09:01:55.637Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:11:30.865098Z"}]}}