CVE-2025-12106: Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over…

• Source: NVD (API)

OpenVPN versions 2.7_alpha1 through 2.7_rc1 have a heap buffer over-read vulnerability (CVE-2025-12106) due to insufficient argument validation when parsing IP addresses.

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses

Related CVEs