This vulnerability (CWE-125: Out-of-bounds Read) in Checkpoint Quantum Security Gateway occurs due to incorrect validation of length values in IKE packets when NAT Traversal (NAT-T) is enabled on UDP port 4500. A specially crafted or malformed packet can trigger an out-of-bounds read, causing the VPN processing service to crash and leading to denial of service conditions. The affected versions include R82.10 with Jumbo Hotfix Take 6 or below, R82 with Jumbo Hotfix Take 91 or below, R81.20 with Jumbo Hotfix Take 127 or below, and all releases from R81.10 and below. The CVSS v3.1 base score is 8.1, indicating high severity with network attack vector, high impact on confidentiality, integrity, and availability, and no required privileges or user interaction.

Successful exploitation causes the VPN processing service on the affected Checkpoint Quantum Security Gateway devices to terminate unexpectedly, resulting in a temporary denial of service. This interrupts VPN negotiations and traffic, potentially impacting secure communications relying on the gateway. There is no indication of code execution or data leakage beyond the denial of service effect.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor vendor communications for updates. No vendor advisory or official remediation level is provided at this time, so no specific mitigation steps can be recommended beyond awaiting a patch.