CVE-2025-62291 - StrongSwan EAP-MSCHAPv2 Client-Side Heap-Based Buffer Overflow

CVE ID : CVE-2025-62291 Published : Jan. 16, 2026, 7:16 p.m. | 1 hour, 1 minute ago Description : In the eap-mschapv2 plugin (client-side) in strongSwan before 6.0.3, a malicious EAP-MSCHAPv2 server can send a crafted message of size 6 through 8, and cause an integer underflow that potentially results in a heap-based buffer overflow. Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...