Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-8760

INSTAR 2K+/4K fcgi_server base64_decode buffer overflow

Description

A vulnerability was identified in INSTAR 2K+ and 4K 3.11.1 Build 1124. This affects the function base64_decode of the component fcgi_server. The manipulation of the argument Authorization leads to buffer overflow. It is possible to initiate the attack remotely.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

INSTAR 2K+

  • 3.11.1 Build 1124affected

INSTAR 4K

  • 3.11.1 Build 1124affected

References