CVE-2026-25075 | strongSwan up to 6.0.4 TTLS AVP Parser length integer underflow

A vulnerability marked as problematic has been reported in strongSwan up to 6.0.4. Affected by this issue is some unknown functionality of the component TTLS AVP Parser. This manipulation of the argument length causes integer underflow.

This vulnerability appears as CVE-2026-25075. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.