CVE-2025-23236: Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier

Q: How do I fix CVE-2025-23236?

defense platform: upgrade to newer than 3.9.51.0. Exact commands for each OS are on this page.

Q: Is CVE-2025-23236 being exploited?

CVE-2025-23236 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2025-23236 affect?

CVE-2025-23236 affects defense platform. Severity is high (CVSS 8.8). Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained.

Routine

HIGH 8.8UPGRADE

CVE-2025-23236 is a high-severity flaw (CVSS 8.8) affecting defense platform. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained.

Why this priority

High severity

A fixed release or distro patch exists.

Risk facts

CVSS score	8.8 (High)
Attack vector	Local
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	0.2% (top 91%)
CISA exploited list	No
Weakness	CWE-120
Published	2025-02-06
Last modified	2026-06-17

Publisher (CNA): JPCERT/CC · Vendor: hummingheads

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2025-02-06 08:15 UTCPublished CVE record published
2026-06-17 08:52 UTCUpdated Record last modified

hummingheads defense platform UPGRADE

Affected: <= 3.9.51.0

Fixed in: newer than 3.9.51.0

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy defense-platform || rpm -q defense-platform || defense-platform --version

2. UPGRADE to newer than 3.9.51.0 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade defense-platform

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade defense-platform

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-23236?

defense platform: upgrade to newer than 3.9.51.0. Exact commands for each OS are on this page.

Is CVE-2025-23236 being exploited?

CVE-2025-23236 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-23236 affect?

CVE-2025-23236 affects defense platform. Severity is high (CVSS 8.8). Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained.

How urgent is CVE-2025-23236?

Priority 33/100. High severity

Software pages

Windows vulnerabilities

Related CVEs

CVE-2025-24845 MEDIUM 5.5 UPGRADE Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Pla
CVE-2025-24483 MEDIUM 5.5 UPGRADE NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier
CVE-2025-22894 HIGH 8.8 UPGRADE Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x a
CVE-2025-22890 HIGH 8.8 UPGRADE Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier
CVE-2025-20094 HIGH 8.8 UPGRADE Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x a

References

← Back to latest CVEs