Memory Corruption Vulnerability in Wind River Products
CVE-2025-26503

6.7MEDIUM

Key Information:

Vendor

Wind River Systems Inc

Status
Vxworks 7
Vendor
CVE Published:
18 September 2025

What is CVE-2025-26503?

A vulnerability exists in Wind River products that allows an attacker to exploit crafted system call arguments, leading to potential memory corruption. This may result in unauthorized access or manipulation of system memory, posing significant security risks for affected systems. It's crucial for users to remain vigilant and apply necessary security patches to mitigate this risk.

Affected Version(s)

VxWorks 7 VxWorks 7 7.0.0 < 25.03

References

https://support2.windriver.com/index.php?page=cve&on=view...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-26503 : Memory Corruption Vulnerability in Wind River Products