← Database

CVE-2025-12106

CRITICAL CVSS: 9.1 Published: 2025-12-01 Modified: 2026-06-17

Description

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses

Affected Platforms

Openvpn Openvpn

Weakness Type

CWE-126

References