Intercom, Inc. Security Point (Windows) of MaLion

• CVE-2025-64693 Critical 9.8 Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially crafted request from a remote unauthenticated 0.7%
• CVE-2025-62691 Critical 9.8 Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers. Receiving a specially crafted request from a remote unauthenticated 0.7%
• CVE-2025-59485 Low 3.3 Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file could be placed in the specific folder by a u 0.1%