Threats Tagged 'ghsa-52fg-7x3j-mp79'

CVE-2026-102712 is a high-severity out-of-bounds read vulnerability in Eclipse Foundation's NetX Duo library. It occurs during the parsing of the first DTLS ClientHello message, where the parser incorrectly validates the ciphersuite-list length against the total record length rather than the remaining bytes. This flaw allows an unauthenticated attacker to read up to 255 bytes of adjacent process memory and leak it in the ServerHello response. The vulnerability can also cause a crash on the first packet received.