← All advisories

Critical severity9.8NVD Advisory· Published Jun 3, 2025· Updated Jun 17, 2026

CVE-2025-32105

CVE-2025-32105

Description

A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remote code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Freepbx/Img2020 Firmware
cpe:2.3:o:sangoma:img2020_firmware:*:*:*:*:*:*:*:*
Range: <=2.3.9.6
Freepbx/IMG2020cpe-rescue
Freepbx/IMG2020 HTTP serverllm-create
Range: <=2.3.9.6

Patches

Vulnerability mechanics

References

2

github.com/austin2111/papers/blob/main/Software_Vulnerabilities_in_Telecommunications_Hardware.pdfnvdExploitThird Party Advisory
github.com/austin2111/papers/blob/main/CVE-2025-32105_CVE-2025-32106_Technical_Report.pdfnvd

News mentions

0

No linked articles in our index yet.