← Database

CVE-2025-32787

LOW CVSS: 3.1 Published: 2025-04-16 Modified: 2026-06-17

Description

SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. Versions 5.02.5184 to 5.02.5187 are vulnerable to NULL dereference in `DeleteIPv6DefaultRouterInRA` called by `StorePacket`. Before dereferencing, `DeleteIPv6DefaultRouterInRA` does not account for `ParsePacket` returning NULL, resulting in the program crashing. A patched version does not exist at this time.

Affected Platforms

Unknown

Weakness Type

CWE-476

References