This vulnerability arises from a flaw in the GnuTLS DTLS handshake parsing within Red Hat Enterprise Linux 10. Specifically, malformed DTLS fragments with zero length but non-zero offset trigger an integer underflow during the reassembly process, causing an out-of-bounds read. The issue is remotely exploitable without authentication and can lead to denial of service or potential information disclosure. The CVSS v3.1 base score is 7.5, reflecting a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability (denial of service).

Successful exploitation of this vulnerability can cause denial of service by crashing the affected service or potentially disclose information due to out-of-bounds memory reads. The vulnerability is exploitable remotely without authentication, increasing its risk. However, there are no known exploits in the wild at this time.

As of now, there is no official patch or remediation level provided by Red Hat. Patch status is not yet confirmed — users should regularly check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-33845 for updates and apply any official fixes once available. Until then, consider limiting exposure of affected services to untrusted networks if feasible.