CVE-2025-62291

Published: Jan 16, 2026Modified: Jun 17, 2026Deferred

8.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.2 / Impact: 5.9

Source: MITRE (Secondary)

Description

In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow.

Related CWEs

CWE-191

Integer Underflow (Wrap or Wraparound)

The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

References (4)

https://github.com/strongswan/strongswan/commits/master/src/libcharon/plugins/eap_mschapv2

Source: cve@mitre.org

https://github.com/strongswan/strongswan/releases

Source: cve@mitre.org

https://www.strongswan.org/blog/2025/10/27/strongswan-vulnerability-%28cve-2025-62291%29.html

Source: cve@mitre.org

https://lists.debian.org/debian-lts-announce/2025/11/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.