The vulnerability is a memory overflow in Citrix NetScaler ADC and NetScaler Gateway, leading to a denial of service when an attacker can cause the affected components to crash or become unresponsive. The weakness involves improper handling of memory buffers and is categorized as a buffer overflow (CWE‑119).

Affected vendors include Citrix NetScaler ADC and NetScaler Gateway. The ADC is vulnerable in versions prior to 14.1‑73.41, 13.1‑64.28, 14.1‑73.41 (FIPS), and 13.1‑37.282. The Gateway is vulnerable in versions before 14.1‑73.41 and before 13.1‑64.28.

The CVSS score of 8.7 indicates a high severity impact. The EPSS score is 11%, indicating a low probability of exploitation, and the vulnerability is listed in the CISA KEV catalog, which indicates public exploits are known. The attack vector is not explicitly stated; it is likely that an attacker would need to send crafted traffic or otherwise interact with the vulnerable component to trigger the memory overflow. The impact would be limited to crashing the affected ADC or Gateway, potentially disrupting network services for users of the Citrix environment.