CVE-2026-85103

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

State: Published
Severity: 9.8 Critical
Published: Sep 9, 2026
Updated: Sep 10, 2026
Reserved: Sep 3, 2026

Description

A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	checkpoint

Weaknesses

CWE-122 Heap-based Buffer Overflow.

Affected Products

Product	Versions
Quantum Security Gatewaycheckpoint	R82.10 with Jumbo Hotfix Take 43 or belowAffected R82 with Jumbo Hotfix Take 125 or belowAffected R81.20 with Jumbo Hotfix Take 165 or belowAffected
Quantum Security Managementcheckpoint	R82.10 with Jumbo Hotfix Take 43 or belowAffected R82 with Jumbo Hotfix Take 125 or belowAffected R81.20 with Jumbo Hotfix Take 165 or belowAffected

References

https://support.checkpoint.com/results/sk/sk1000118

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.