CVE-2025-62691 - Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers

Back Back to CVE browser

CRITICAL

Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers

Published Nov 25, 2025

9.3

CRITICAL

CVSS 4.0

EPSS 0.68%

Description

Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.

Affected products

Vendor Intercom, Inc. Product Security Point (Windows) of MaLion Default
n/a
- Version
  prior to Ver.7.1.1.9
  Status
  affected
  Constraints
  -
Vendor Intercom, Inc. Product Security Point (Windows) of MaLionCloud Default
n/a
- Version
  prior to Ver.7.2.0.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Intercom, Inc.

Security Point (Windows) of MaLion

n/a

Version	Status	Constraints
prior to Ver.7.1.1.9	affected	-

Intercom, Inc.

Security Point (Windows) of MaLionCloud

n/a

Version	Status	Constraints
prior to Ver.7.2.0.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-121

References (2)

Link	Providers	Tags
https://jvn.jp/en/jp/JVN76298784/
https://www.intercom.co.jp/information/2025/1125.html

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Nov 25, 2025

Updated Nov 25, 2025

Reserved Nov 18, 2025

Link CVE-2025-62691

CISA Vulnrichment

Updated Nov 25, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-62691

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-62691