← Database

CVE-2024-46670

HIGH CVSS: 7.5 Published: 2025-01-14 Modified: 2026-06-17

Description

An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE service may allow an unauthenticated remote attacker to trigger memory consumption leading to Denial of Service via crafted requests.

Affected Platforms

Fortinet Fortios

Weakness Type

CWE-125

References