Out-of-bounds Read in Netskope Client
CVE-2025-5941
Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory leak by sending a crafted DNS packet to a machine. A successful exploitation may require administrative privileges on the…
Vulnerability class: Buffer Overflow
EPSS: 0.001 (1.3th percentile) — read the EPSS interpretation.
Affected products
- Netskope Client — versions 0
Weakness classification (CWE)
References
- psirt@netskope.com (vendor-advisory)