Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-64693 EUVD-2025-199587GHSA-29fx-phpp-3hmg

Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiv…

Published Nov 25, 2025 · Updated Nov 25, 2025 · Assigned by jpcert

Description

Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.

Affected products

VendorProductAffectedFixed
Intercom Security Point (Windows) of MaLion prior to Ver.7.1.1.9 —
Intercom Security Point (Windows) of MaLionCloud prior to Ver.7.2.0.1 —

References