Description
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- checkpoint / Quantum Security GatewayR82.10 with Jumbo Hotfix Take 43 or below – R82.10 with Jumbo Hotfix Take 43 or below
- checkpoint / Quantum Security GatewayR82 with Jumbo Hotfix Take 125 or below – R82 with Jumbo Hotfix Take 125 or below
- checkpoint / Quantum Security GatewayR81.20 with Jumbo Hotfix Take 165 or below – R81.20 with Jumbo Hotfix Take 165 or below
- checkpoint / Quantum Security ManagementR82.10 with Jumbo Hotfix Take 43 or below – R82.10 with Jumbo Hotfix Take 43 or below
- checkpoint / Quantum Security ManagementR82 with Jumbo Hotfix Take 125 or below – R82 with Jumbo Hotfix Take 125 or below
- checkpoint / Quantum Security ManagementR81.20 with Jumbo Hotfix Take 165 or below – R81.20 with Jumbo Hotfix Take 165 or below
News coverage
- Dutch NCSC: Critical Check Point VPN flaws exploitation is imminentBleepingComputer · 9/12/2026
References
Updated 44m ago · 8 sources