description: The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing.
problem types: CWE-476: NULL Pointer Dereference
affected:
{
vendor: OpenVPN
product: OpenVPN 3 Core Library
modules: PKCS#7
versions:
status: affected, version: 3.0, lessThanOrEqual: 3.8.3, versionType: minor releases
defaultStatus: unaffected
}