CVE-2025-50054

Description

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash

Reserved 2025-06-11 | Published 2025-06-20 | Updated 2025-06-20 | Assigner OpenVPN

Problem types

CWE-122: Heap-based Buffer Overflow

CWE-787: Out-of-bounds Write

Product status

Default status
unaffected

Any version before 1.3.1
affected

Any version before 2.5.9
affected

References

community.openvpn.net/Security Announcements/CVE-2025-50054

community.openvpn.net/Downloads

cve.org (CVE-2025-50054)

nvd.nist.gov (CVE-2025-50054)

Download JSON