CVE-2025-26503— Buffer manipulation
Quick assessment
Affected
Wind River Systems Inc VxWorks 7
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Wind River Systems VxWorks 7是美国风河（Wind River Systems）公司的一款嵌入式操作系统。 Wind River Systems VxWorks 7存在安全漏洞，该漏洞源于特制系统调用参数可能导致内存损坏。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-26503
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Buffer manipulation
Source: CVE Program / CVE List V5
Vulnerability Description
A crafted system call argument can cause memory corruption.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Wind River Systems VxWorks 7 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Wind River Systems VxWorks 7是美国风河（Wind River Systems）公司的一款嵌入式操作系统。 Wind River Systems VxWorks 7存在安全漏洞，该漏洞源于特制系统调用参数可能导致内存损坏。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Wind River Systems Inc | VxWorks 7 | 7.0.0 ~ 25.03 | - |
|
II. Public POCs for CVE-2025-26503
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-26503
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: VxWorks 7
Same weakness: CWE-119
-
CVE-2026-90831
GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_d -
CVE-2026-54559
PocketSphinx: Buffer overflows in language and acoustic mode -
CVE-2026-90714
marcobambini Gravity JSON parser gravity_json.c memory corru -
CVE-2026-90686
GPAC MP4Box loader_bt.c gf_bt_report memory corruption -
CVE-2026-90572
davenardella snap7 s7_micro_client.cpp opUpload memory corru
V. Comments for CVE-2025-26503
No comments yet