CVE-2025-25567

SoftEther VPN 5.02.5187 is vulnerable to Buffer Overflow in Internat.c via the UniToStrForSingleChars function. NOTE: the Supplier disputes this because the behavior only enables a local user to attack himself through the UI,

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2025-03-12

Last modified

2025-07-19

Weaknesses

CWE-120

Affected products

• Vpn (Softether)

References

• https://filecenter.softether-upload.com/d/250715_001_79538/CVE-2025-25567.pdf
• https://lzydry.github.io/CVE-2025-25567/