CVE-2025-64693 - Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length

Back Back to CVE browser

CRITICAL

Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length

Published Nov 25, 2025

9.3

CRITICAL

CVSS 4.0

EPSS 0.68%

Description

Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.

Affected products

Vendor Intercom, Inc. Product Security Point (Windows) of MaLion Default
unknown
Affected
- prior to Ver.7.1.1.9
Vendor Intercom, Inc. Product Security Point (Windows) of MaLionCloud Default
unknown
Affected
- prior to Ver.7.2.0.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Intercom, Inc.	Security Point (Windows) of MaLion	unknown	Affected prior to Ver.7.1.1.9
Intercom, Inc.	Security Point (Windows) of MaLionCloud	unknown	Affected prior to Ver.7.2.0.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-122

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-199587		Advisory
https://jvn.jp/en/jp/JVN76298784/
https://www.intercom.co.jp/information/2025/1125.html

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jpcert

Published Nov 25, 2025

Updated Nov 25, 2025

Reserved Nov 18, 2025

Link CVE-2025-64693

CISA Vulnrichment

Updated Nov 25, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-64693

Red Hat

No data

ENISA EUVD

Assigner jpcert

Published Nov 25, 2025

Updated Nov 25, 2025

Link EUVD-2025-199587

GitHub

No data