GHSA-cmj5-x3xf-69wqHighCVSS 7.5

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero...

Published
April 30, 2026
Last Modified
May 27, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.

🔗 References (6)