# CVE-2025-67896: Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow…

Source: https://junglewise.ai/threats/cve-2025-67896-exim-before-4-99-1-with-certain-non-default-rate-limit  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-14  
License: CC BY 4.0 with a link back

CVE-2025-67896 · Severity: high · CVSS 7 · Published 2025-12-14

Exim before 4.99.1, with certain non-default rate-limit configurations, allows a remote heap-based buffer overflow because database records are cast directly to internal structures without validation.

Technologies: [Exim](https://junglewise.ai/threats/technologies/exim). Vendors: [Exim](https://junglewise.ai/threats/vendors/exim).

## Quick answers

**Is CVE-2025-67896 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-67896 being exploited in the wild.

**How severe is CVE-2025-67896?** High severity, with a CVSS score of 7, published 14 December 2025.

**Which products and versions are affected?** Exim. The advisory does not name versions.

**Is there a fix for CVE-2025-67896?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-67896?** Check whether you run Exim. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Exim

## Related threats

- [Exim SMTP smuggling in DATA phase rejection handling](https://junglewise.ai/threats/cve-2026-94057-exim-before-4-100-1-allows-smtp-smuggling-in-which-the-received)
- [Exim Proxy Protocol stack memory disclosure](https://junglewise.ai/threats/cve-2026-94056-exim-before-4-100-1-when-proxy-protocol-is-used-with-an-attacker)
- [Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.](https://junglewise.ai/threats/cve-2026-94055-exim-before-4-100-1-when-certain-non-default-tls-settings-are)
- [Exim out-of-bounds write in Proxy Protocol v1](https://junglewise.ai/threats/cve-2026-94054-exim-before-4-100-1-when-proxy-protocol-is-used-with-an-attacker)
- [Exim privilege escalation in .forward pipe transport force_command](https://junglewise.ai/threats/cve-2026-66141-exim-privilege-escalation-in-forward-pipe-transport-force-command)