Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-49080

Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54

Description

There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence of packets to the server. The attack complexity is low, there are no attack requirements, privileges, or user interaction required. Loss of availability is high; there is no impact on confidentiality or integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Absolute Security Secure Access

Default version status: unaffected

  • 9.0 to < 13.54affected

References