CVE advisoryCRITICAL
CVE-2025-67896
Exim Heap-Based Buffer Overflow Vulnerability
Halo Surface Signal: 5 out of 5 — more likely to be public-facing.
A critical heap-based buffer overflow vulnerability exists in Exim when specific non-default rate-limit configurations are used. This flaw arises from database records being cast to internal structures without validation, which could allow remote attackers to impact system availability and integrity.