CVE-2025-41414: 
F5 BIG-IP Advanced Firewall Manager vulnerability analysis and mitigation

A vulnerability identified as CVE-2025-41414 was discovered and published on May 7, 2025. The issue affects F5 BIG-IP Virtual Edition systems when HTTP/2 client and server profile is configured on a virtual server. The vulnerability can cause the Traffic Management Microkernel (TMM) to terminate when specific undisclosed requests are processed (NVD Database, Wiz Report).

The vulnerability is classified as a NULL Pointer Dereference (CWE-476) issue. It has received a CVSS v4.0 Base Score of 8.7 (HIGH) with vector string CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L, and a CVSS v3.1 Base Score of 7.5 (HIGH) with vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (NVD Database).

The vulnerability's primary impact is on system availability, as it can cause the Traffic Management Microkernel (TMM) to terminate, potentially leading to service disruption. The high CVSS scores indicate significant impact on system availability, though there are no direct impacts on confidentiality or integrity (Wiz Report).

Software versions which have reached End of Technical Support (EoTS) are not evaluated. Affected users should consult F5's official security advisory for specific mitigation steps and patches (NVD Database).