CVE-2024-1305 Information

Description

tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers resulting in a bug check and potentially arbitrary code execution in kernel space

Reference

https://community.openvpn.net/openvpn/wiki/CVE-2024-1305 https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html