Cisco Secure Firewall Adaptive Security Appliance Software OSPF Protocol out-of-range pointer offset

Summaryinfo

A vulnerability identified as problematic has been detected in Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software. This impacts an unknown function of the component OSPF Protocol Handler. Performing a manipulation results in use of out-of-range pointer offset. This vulnerability is cataloged as CVE-2026-20022. The attack must originate from the local network. There is no exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software (affected version not known). It has been classified as problematic. This affects some unknown functionality of the component OSPF Protocol Handler. The manipulation with an unknown input leads to a use of out-of-range pointer offset vulnerability. CWE is classifying the issue as CWE-823. The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer. This is going to have an impact on availability. The summary by CVE is:

A vulnerability in the OSPF protocol of Cisco Secure Firewall ASA Software and Cisco Secure FTD Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly, resulting in a DoS condition when OSPF canonicalization debug is enabled by using the command debug ip ospf canon. This vulnerability is due to insufficient input validation when processing OSPF LSU packets. An attacker could exploit this vulnerability by sending crafted unauthenticated OSPF packets. A successful exploit could allow the attacker to write to memory outside of the packet data, causing the device to reload, resulting in a DoS condition.

It is possible to read the advisory at sec.cloudapps.cisco.com. This vulnerability is uniquely identified as CVE-2026-20022 since 10/08/2025. The exploitability is told to be difficult. The attack can only be initiated within the local network. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 05/05/2026).

Upgrading eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Firewall Software

Vendor

• Cisco

Name

• Secure Firewall Adaptive Security Appliance Software
• Secure Firewall Threat Defense Software

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion