Threats Tagged 'ghsa-rqmh-m9w6-hv3m'

CVE-2026-102728 is a high-severity buffer over-read vulnerability in the Eclipse Foundation's NetX Duo library. It affects two client-side TLS/DTLS handshake parsers that read server-supplied message fields before verifying the message length, leading to out-of-bounds reads. This flaw occurs when a TLS or DTLS client connects to a malicious or malformed server. The vulnerability has a CVSS score of 7.5, indicating significant confidentiality impact but no integrity or availability impact. Affected versions include all NetX Duo releases up to and including 6.5.1.202602.