NetSight
critical9.8

CVE-2024-1305

tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory b…

Impact

tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space

Affected products

VendorProductAffected versions
OpenvpnTap-Windows6
through 9.26.0

Weakness classification

References