Published
2025-09-08
·
Updated
2025-09-08
·
CVE-2025-36855
8.8
High
| Base vector | Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
.NET 6.0.0 through 6.0.36
.NET 8.0.0 through 8.0.11
.NET 9.0.0
Description:
A buffer over-read issue exists in DiaSymReader.dll. This occurs when a product reads from a buffer using buffer access mechanisms that reference memory locations after the targeted buffer. This affects self-contained applications targeting the impacted versions, which require recompilation and redeployment. The affected software components are End Of Life (EOL) and will not receive further updates or support.
Recommendations:
Recompile and redeploy self-contained applications targeting .NET 6.0.0 through 6.0.36.
Recompile and redeploy self-contained applications targeting .NET 8.0.0 through 8.0.11.
Recompile and redeploy self-contained applications targeting .NET 9.0.0.
Fix
RCE
Buffer Over-read