CVE-2026-2738

ovpn-dco-win 2.8.0 - Buffer Overflow

Title source: llm

Description

Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag appears at the end of the encrypted packet

Scores

EPSS 0.0002
EPSS Percentile 4.6%

Classification

CWE
CWE-131
Status draft

Timeline

Published Feb 19, 2026
Tracked Since Feb 20, 2026