CVE-2025-64693

Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.

Score

CVSS 3.0 9.8 Critical

Status

Deferred - vultures@jpcert.or.jp

Published

2025-11-25

Last modified

2026-10-18

Weaknesses

CWE-122

Affected products

• Security Point Windows Of Malion (Intercom Inc.)
• Security Point Windows Of Malioncloud (Intercom Inc.)

References

• https://www.intercom.co.jp/information/2025/1125.html
• https://jvn.jp/en/jp/JVN76298784/