Out-of-bounds Read in Openvpn
CVE-2026-12996
A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry
Vulnerability class: Buffer Overflow
Affected products
- Openvpn — versions 2.6.0, 2.7_alpha1
Weakness classification (CWE)
References
- security@openvpn.net (vendor-advisory)
- security@openvpn.net (release-notes)
- security@openvpn.net (release-notes)
- af854a3a-2127-422b-91ae-364da2661108