This vulnerability involves improper handling of length parameter inconsistencies during DTLS handshake fragment reassembly in GnuTLS within Red Hat Enterprise Linux 10. Specifically, merge_handshake_packet() merges handshake fragments based solely on handshake type, neglecting to validate that the message_length field is consistent across all fragments of the same logical message. An attacker can exploit this by sending DTLS fragments with conflicting message_length values, leading to allocation of a buffer sized for a smaller fragment and subsequent out-of-bounds writes when larger fragments are merged. This results in a heap buffer overflow, potentially causing application crashes or memory corruption. The flaw is remotely exploitable without requiring authentication via the DTLS handshake path. The CVSS v3.1 base score is 7.5, reflecting high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impact limited to availability (application crash). Red Hat has published an advisory but has not yet confirmed a patch or remediation status.

The vulnerability allows a remote attacker to cause a heap buffer overflow in the DTLS handshake processing of GnuTLS on Red Hat Enterprise Linux 10. This can lead to application crashes or memory corruption, impacting the availability of affected services. There is no indication of confidentiality or integrity impact. Exploitation does not require authentication or user interaction, increasing risk. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-33846 for current remediation guidance. Until an official fix is available, consider mitigating exposure by limiting access to DTLS services or disabling DTLS if feasible. Monitor Red Hat communications for updates on patches or workarounds.