← Vulnerability feed

Vulnerability record · CVE-2025-30347 · published 21 March 2025

CVE-2025-30347: Varnish-software varnish enterprise out-of-bounds read vulnerability

Varnish Software · Varnish Enterprise

Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via an out-of-bounds read for range requests on ephemeral MSE4 stevedore objects.

7.5 CVSS 3.1 High EPSS 0.35% · top 74.6% CWE-125 · Out-of-bounds read
7.5CVSS 3.1 base score
0.35%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via an out-of-bounds read for range requests on ephemeral MSE4 stevedore objects.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://docs.varnish-software.com/security/VEV00001/ MitigationVendor Advisory

Track CVE-2025-30347 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-34475Varnish-software varnish enterprise vulnerabilityVarnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/…EPSS 0.37%7.5CVE-2026-40395Varnish-software varnish enterprise allocation without limits vulnerabilityVarnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) for shared VCL. The headerplus.write_req0() functi…EPSS 0.40%7.5CVE-2026-40394Varnish-software varnish enterprise vulnerabilityVarnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" denial of service (daemon panic) for certain amoun…EPSS 0.40%6.5CVE-2023-41104Varnish-software varnish enterprise memory buffer overflow vulnerabilitylibvmod-digest before 1.0.3, as used in Varnish Enterprise 6.0.x before 6.0.11r5, has an out-of-bounds memory access during base64 decoding, leading …EPSS 0.60%4.8CVE-2025-30346Varnish-software varnish enterprise http request smuggling vulnerabilityVarnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.EPSS 0.31%8.8CVE-2026-11645Google Chrome V8 out-of-bounds read and write enables sandbox code executionGoogle Chrome before 149.0.7827.103 contains an out-of-bounds read and write in the V8 JavaScript engine. A crafted HTML page can trigger the memory …KEVEPSS 2.2%analysed7.8CVE-2023-36424Windows Common Log File System Driver out-of-bounds read privilege escalationCVE-2023-36424 is an out-of-bounds read (CWE-125) in the Windows Common Log File System (CLFS) driver that allows elevation of privilege. It affects …KEVEPSS 12%analysed9.3CVE-2026-3055Citrix NetScaler ADC and Gateway SAML IDP memory overreadNetScaler ADC and NetScaler Gateway, when configured as a SAML identity provider, fail to validate input sufficiently, causing an out-of-bounds memor…KEVEPSS 4.0%analysed

Source: NIST National Vulnerability Database (record CVE-2025-30347), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.