CVE-2024-34446

Mullvad VPN versions through 2024.1 on Android are vulnerable to a DNS leak. When the application experiences a hard failure to create a tunnel, it fails to set a DNS server in the blocking state . Consequently, DNS traffic can leave the device, potentially allowing operators of unintended DNS se...