CVE-2026-48131 — VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero

CVE-2026-48131

VPND IKE Fragment Reassembly - Heap Out-of-Bounds Write via Sequence Number Zero PUBLISHED

Description (CNA)

The VPN service may mishandle an unexpected IKE fragment value received on the IKE port 500/UDP during the early stage of a connection attempt. This can cause the service to terminate unexpectedly, resulting in denial of service (temporary disruption of VPN-related functionality).

Affected (CNA)

Vendor / product	Versions
checkpoint / Quantum Security Gateway	affected R82.10 with Jumbo Hotfix Take 6 or below; affected R82 with Jumbo Hotfix Take 91 or below; affected R81.20 with Jumbo Hotfix Take 127 or below; affected All releases from R81.10 and below

CWE

CWE-122

References

https://support.checkpoint.com/results/sk/sk184981

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.