CVE-2025-12106

Publication date

2025-12-01 12:43:02

Family

OpenVPN

State

PUBLISHED

Description

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses