CVE-2025-12106
Critical · 9.1CVSS
9.1
EPSS
0.6%
Published
Dec 1, 2025
CISA due date
—
The record
Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|