CVE-2026-9267 is an out-of-bounds read vulnerability (CWE-125) in Eclipse Foundation's Eclipse tinydtls component prior to commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221. The issue arises from missing buffer length validation before performing uint24 reads, memcmp, and memcpy operations in the check_server_certificate() function. An attacker can exploit this by crafting a Certificate handshake message with a specific fragment_length value, causing reads beyond valid buffer boundaries during DTLS epoch 0 on both client and server paths. This can result in denial of service, particularly impacting memory-constrained devices.

The vulnerability allows unauthenticated attackers to cause out-of-bounds reads, which can lead to denial of service conditions on affected devices. There is no indication of code execution or data disclosure beyond the out-of-bounds read. The impact is primarily denial of service on memory-constrained devices using vulnerable versions of Eclipse tinydtls.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided at this time. Users should monitor Eclipse Foundation advisories for updates and apply any forthcoming patches promptly.