critical9.1
CVE-2025-12106
Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses
Impact
Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvpn | Openvpn | Versions 2.6.13, 2.7 |