Threats Tagged 'ghsa-qfqh-8mhg-fcvw'

CVE-2026-102758 is a buffer over-read vulnerability in the Eclipse Foundation NetX Duo library's function _nx_secure_x509_asn1_tlv_block_parse(). This function reads an ASN.1 tag byte from a buffer before verifying the buffer length, potentially reading one byte beyond the buffer when the remaining length is zero. The vulnerability affects X.509 certificate parsing during TLS handshakes. The issue can cause an out-of-bounds read but does not impact confidentiality or integrity, only availability. The affected versions are from 0 up to and including 6.5.1.202602.