The bug in mp_Enddisc() causes an incorrect length calculation when formatting endpoint discriminator addresses for display, which overflows a global result buffer. This overflow can crash the ppp(8) process or, if exploited correctly, allow an attacker to execute arbitrary code with root privileges. The flaw is a classic buffer overflow (CWE‑122) that can compromise confidentiality, integrity, and availability of the system.

The vulnerability affects FreeBSD systems that use the ppp(8) implementation containing mp_Enddisc(). Specific product is FreeBSD; no version information is listed, so all releases affected by the advisory should be considered vulnerable until a patched release is applied.

The attack vector is a malicious PPP peer that sends a crafted endpoint option. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, but the potential for arbitrary code execution and root privilege escalation indicates a high severity. The lack of an official CVSS score does not diminish the risk; the flaw remains exploitable from a remote PPP session without additional authentication.