Memory Management Flaw in Absolute Secure Access Server

CVE-2025-49080

What is CVE-2025-49080?

A memory management vulnerability exists in Absolute Secure Access server versions 9.0 to 13.54, allowing remote attackers with network access to induce a Denial of Service by sending a specially crafted packet sequence. The attack is characterized by low complexity and does not require any specific privileges or user interaction, resulting in significant availability loss while not affecting confidentiality or integrity.

References