EUVD-2025-16702Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
3DescriptionCVE.org
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.
AnalysisAI
Network-accessible denial-of-service vulnerability in tone measurement response buffer processing that occurs when buffer contents fall outside expected range parameters, resulting in application/service crashes. The vulnerability affects systems implementing tone measurement protocols with improper input validation on buffer boundaries. An unauthenticated remote attacker can trigger this vulnerability with minimal complexity, causing service unavailability; however, without CVE details indicating active KEV status or public PoC availability, real-world exploitation likelihood remains moderate despite the high CVSS 7.5 score.
Technical ContextAI
This vulnerability stems from CWE-126 (Buffer Over-read), a memory safety issue where code reads data beyond intended buffer boundaries without proper validation. The specific context involves tone measurement response processing—likely used in audio, telecommunications, or signal processing systems. The vulnerability manifests when the tone measurement protocol receives a response buffer with out-of-range values that the application fails to validate before processing. The absence of bounds checking on the response buffer allows reading beyond allocated memory, causing undefined behavior and denial of service. The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates the vulnerability is exploitable over the network without authentication or user interaction, suggesting the tone measurement service is directly exposed to network input without intermediate validation layers.
RemediationAI
Specific patch versions are not provided in the available data. General remediation steps: (1) Obtain vendor patches: Contact your equipment/software vendor for CVE-2025-27029 security updates; apply patches immediately to all affected systems; (2) Input validation workaround: If patching is delayed, implement network-level input validation to reject tone measurement responses outside expected value ranges before they reach vulnerable processing code; (3) Network segmentation: Restrict network access to tone measurement services to trusted internal networks only, reducing attack surface until patches are deployed; (4) Service monitoring: Implement alerting on service crashes and abnormal tone measurement request patterns to detect exploitation attempts; (5) Vendor advisory consultation: Review the vendor's security advisory (typically available via CVE database links) for version-specific patch availability and additional mitigation recommendations.
Memory corruption while redirecting log file to any file location with any file name. Rated critical severity (CVSS 9.8)
Memory corruption in WLAN Host while processing RRM beacon on the AP. Rated critical severity (CVSS 9.8), this vulnerabi
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE. Rated critical seve
Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. Rated critical severity
Memory corruption in WLAN Firmware while doing a memory copy of pmk cache. Rated critical severity (CVSS 9.8), this vuln
Memory corruption while loading an ELF segment in TEE Kernel. Rated high severity (CVSS 8.8), this vulnerability is low
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE. Rated high
Memory corruption when allocating and accessing an entry in an SMEM partition continuously. Rated high severity (CVSS 7.
Memory corruption when allocating and accessing an entry in an SMEM partition. Rated high severity (CVSS 7.8), this vuln
Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of th
Memory corruption when processing cmd parameters while parsing vdev. Rated high severity (CVSS 7.8), this vulnerability
Memory corruption in Kernel while parsing metadata. Rated high severity (CVSS 7.8), this vulnerability is low attack com
Same weakness CWE-126 – Buffer Over-read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today