← Database

CVE-2026-33845

HIGH CVSS: 7.5 Published: 2026-04-30 Modified: 2026-07-20

Description

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.

Affected Platforms

Redhat Openshift Container PlatformRedhat Enterprise LinuxGnu Gnutls

Weakness Type

CWE-191, CWE-191

References