This vulnerability involves two client-side TLS/DTLS handshake parsers in NetX Secure that perform out-of-bounds reads by accessing fields in a server-supplied message before confirming the message is sufficiently long. Although a bounds check exists, it is executed after the unsafe read, allowing a remote attacker controlling a malicious or malformed server to trigger these out-of-bounds reads during the handshake process. The issue affects NetX Duo versions >=0 and <=6.5.1.202602.

The impact is a buffer over-read on a remotely reachable code path during TLS/DTLS client handshakes. This could potentially lead to information disclosure or application instability. However, no known exploits are reported in the wild, and no CVSS score is assigned to quantify severity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid connecting NetX Duo TLS/DTLS clients to untrusted or potentially malicious servers.