PT-2026-113547 · Openvpn · Openvpn

CVE-2026-88964

·

Published

2026-10-13

·

Updated

2026-10-13

CVSS v4.0

7.1

High

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
An integer underflow in OpenVPN version 2.7 alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options

Fix

Out of bounds Read

Integer Underflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-125CWE-191

Related Identifiers

CVE-2026-88964

Affected Products

Openvpn