Vulnerability Details CVE-2025-12106
Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.3%
CVSS Severity
CVSS v3 Score 9.1
Products affected by CVE-2025-12106
-
cpe:2.3:a:openvpn:openvpn:2.6.13
-
cpe:2.3:a:openvpn:openvpn:2.7