CVE-2025-10225 — Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk)

CVE-2025-10225

Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk) PUBLISHED

Description (CNA)

Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk) 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via triggering memory reallocation errors when handling expired session keys.

Affected (CNA)

Vendor / product	Versions
AxxonSoft / AxxonOne C-Werk	affected 0 through 2.0.6

CWE

CWE-119

References

https://www.axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.