CVE-2026-85103
Received
Received - Intake
Heap-based Buffer Overflow in Check Point Quantum Security
Vulnerability report for CVE-2026-85103, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-09
Last updated on: 2026-09-09
Assigner: Check Point Software Technologies Ltd.
Description
Description
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| checkpoint | quantum_security_management | * |
| checkpoint | quantum_security_gateway | * |
| checkpoint | security_management_server | * |
| checkpoint | security_gateway | * |
| checkpoint | spark_firewall | * |
| checkpoint | security_management_server | to 82.20 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-122 | A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). |
