VULNERABILITY INTELLIGENCE
CVE-2026-33845
CVSS score7.5 HIGH
EPSS probability2.07%
CISA KEVNot currently listed
Published2026-04-30
Last modified2026-10-26
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
Weakness classification
- secalert@redhat.com: CWE-191
- 0b0ca135-0b70-47e7-9f44-1890c2a1c46c: CWE-191