Junglewise Threat Intelligence

CVE-2025-12106: Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP

CVE-2025-12106 · Severity: critical · CVSS 9.1 · Published 2025-12-01

Executive brief

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses