Advisoriesby IbisCheck PointCVE-2026-85103
Check Point Quantum Security: heap buffer overflow
No fix yet
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Quantum Security Gateway Product | <= R82.10 with Jumbo Hotfix Take 43 or below | No fix yet |
| <= R82 with Jumbo Hotfix Take 125 or below | No fix yet | |
| <= R81.20 with Jumbo Hotfix Take 165 or below | No fix yet | |
| Quantum Security Management Product | <= R82.10 with Jumbo Hotfix Take 43 or below | No fix yet |
| <= R82 with Jumbo Hotfix Take 125 or below | No fix yet | |
| <= R81.20 with Jumbo Hotfix Take 165 or below | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-122