CVE-2025-12106

Critical

Published: 01/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses.

Risk Assessment

Risk of data exposure or service disruption due to buffer over-read, potentially affecting availability and confidentiality.

Recommendation

Update OpenVPN to a patched version and monitor security advisories.

Original NVD description (English source)

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses