Critical severity9.1NVD Advisory· Published Dec 1, 2025· Updated Jun 17, 2026
CVE-2025-12106
CVE-2025-12106
Description
Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP addresses
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:openvpn:openvpn:2.6.13:*:*:*:community:*:*:*+ 9 more
- cpe:2.3:a:openvpn:openvpn:2.6.13:*:*:*:community:*:*:*
- cpe:2.3:a:openvpn:openvpn:2.7:alpha1:*:*:community:*:*:*
- cpe:2.3:a:openvpn:openvpn:2.7:alpha2:*:*:community:*:*:*
- cpe:2.3:a:openvpn:openvpn:2.7:alpha3:*:*:community:*:*:*
- cpe:2.3:a:openvpn:openvpn:2.7:beta1:*:*:community:*:*:*
- cpe:2.3:a:openvpn:openvpn:2.7:beta2:*:*:community:*:*:*
- cpe:2.3:a:openvpn:openvpn:2.7:beta3:*:*:community:*:*:*
- cpe:2.3:a:openvpn:openvpn:2.7:rc1:*:*:community:*:*:*
- (no CPE)range: 2.7_alpha1 through 2.7_rc1
- (no CPE)range: 2.7_alpha1
Patches
Vulnerability mechanics
References
2- community.openvpn.net/Security%20Announcements/CVE-2025-12106nvdVendor Advisory
- www.mail-archive.com/[email protected]/msg00152.htmlnvdMailing List
News mentions
0No linked articles in our index yet.