CVE-2025-12106

No fix known EPSS <1%CVSS 9.1

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses

Published 2025-12-01 · CVE record · OSV

Products: OpenVPN