CVE-2024-1305 - CVE House
Back to Database
Status published Unknown CVE-2024-1305

tap-windows6 driver version 9.26 and earlier does not properly check...

Vulnerability Description

tap-windows6 driver version 9.26 and earlier does not properly check the size data of incomming write operations which an attacker can use to overflow memory buffers, resulting in a bug check and potentially arbitrary code execution in kernel space

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-1305

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

tap-windows6, OpenVPN-GUI
Vulnerable Versions:
9.26 or earlier, 2.6.9 and earlier

Timeline

Official Publish: July 8th, 2024
Last Modified: August 23rd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)