CVE-2024-34446

Mullvad VPN through 2024.1 on Android does not set a DNS server in the blocking state after a hard failure to create a tunnel, and thus DNS traffic can leave the device. Data showing that the affected device was the origin of sensitive DNS requests may be observed and logged by operators of...

CVE-2024-34446

CVE-2024-34446 affects Mullvad VPN on Android (versions up to 2024.1). The issue occurs when Mullvad fails to set a DNS server in the blocking state after a tunnel creation failure, allowing DNS traffic to leak from the device. Reports from multiple sources (NVD, Red Hat, OSV, CNNVD, CVE listings...