Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
checkpoint · Quantum Security Gateway
A heap-based buffer overflow in the VPN certificate ASN.1 decoding component of Check Point Quantum Security Gateway (and Quantum Security Management) can be triggered when the software parses certificates. An unauthenticated remote attacker with network access can exploit it without user interaction or a specific configuration to execute arbitrary code on the affected system.
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
- Exploited
- Yes, per ENISA EUVD
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
Confirmed exploited 16 days after disclosure.
- Disclosedday 0
- EU database marks exploited+16 days
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.
What security researchers reported
Not named in any threat report yetAlso mentioned in 18 community threat pulses (AlienVault OTX)
Weaker evidencePulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.
- Teams vishing: fake “IT” tenant30 Oct 2026
- EbeeOct2026 Pt628 Oct 2026
- Beyond the Inbox: How Threat Actors Abuse Microsoft Teams External Chat for Initial Access27 Oct 2026
- Beyond the Inbox: How Threat Actors Abuse Microsoft Teams External Chat for Initial Access26 Oct 2026
- Graphalgo DPRK: Malicious Terraform Providers & Go Modules on HashiCorp Registry10 Oct 2026
- Dell CSM <1.17.0 Critical Unauth Admin & K8s Node Root (CVE-2026-63688 et al.)3 Oct 2026
- 12 more on OTX