CVE-2025-25567

Summary

CVE-2025-25567 is a recently identified vulnerability affecting SoftEther VPN version 5.02.5187. This issue involves a buffer overflow vulnerability located in the "Internat.c" file, specifically with the "UniToStrForSingleChars" function. Malicious input can cause the buffer to exceed its limits, enabling attackers to execute arbitrary code or cause denial-of-service conditions. Successful exploitation of this vulnerability could lead to significant security risks for organizations using this VPN software. It is recommended that users upgrade to a patched version as soon as possible to protect against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.