CVE-2025-25066: nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c.

PriorityP346high8.4CVSS 3.1

AVLACLPRNUINSUCHIHAH

EPSS

0.17%

6.6th percentile

nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	ndpi	—	—
ntop	ndpi	<= 4.12	—

CVSS provenance

nvdv3.18.4HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

osv8.4HIGH

vendor_debian8.1LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.