Threats Tagged 'ghsa-mmmp-6qxx-j473'

CVE-2026-102760 is a use-after-free vulnerability in Eclipse Foundation's NetX Duo when built with NX_SECURE_KEY_CLEAR. The vulnerability occurs because TLS records are wiped after being handed to TCP, which may have already released the packet memory. This leads to memory corruption by writing zeros into freed or reused packets, causing an underflow and out-of-bounds memory write.