The vulnerability occurs when an unexpected IKE fragment value is received on the VPN service’s IKE port (UDP 500) during the early stages of a connection attempt. The fixed‑size buffer used for fragment reassembly can be written beyond its bounds when the fragment sequence number is zero, leading to a heap out‑of‑bounds write. The immediate consequence is that the VPN process terminates, causing a temporary denial of service to VPN clients and administrators.

Checkpoint Quantum Security Gateway is the only vendor/product listed as affected. No specific firmware or software version ranges are provided in the public data, so any deployment of this gateway should be reviewed for the presence of this flaw until a patch is available.

The CVSS score of 8.1 indicates high severity, with the attack vector inferred to be remote because the vulnerability is triggered by data received over the open UDP 500 port. The EPSS score is 3%, and the flaw is not listed in CISA KEV, suggesting that while exploitation is theoretically possible, no widespread public exploitation is currently confirmed. Nonetheless, the impact on availability is significant for organizations that rely on VPN endpoints for remote access.