https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 22:26:06 +0000 https://vulnerability.circl.lu/vuln/cve-2026-102712 <p><strong>Affected:</strong> Eclipse Foundation NetX Duo</p> <p>On the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the</p> <p>ciphersuite-list length against the total record length instead of the remaining bytes. An unauthenticated</p> <p>peer drives an OOB source read of up to 255 bytes, and those bytes are echoed verbatim into the outgoing</p> <p>ServerHello, disclosing adjacent process memory over the network. The crash variant fires on the first</p> <p>packet.</p> <p><strong>Affected:</strong> Eclipse Foundation NetX Duo</p> <p>On the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the</p> <p>ciphersuite-list length against the total record length instead of the remaining bytes. An unauthenticated</p> <p>peer drives an OOB source read of up to 255 bytes, and those bytes are echoed verbatim into the outgoing</p> <p>ServerHello, disclosing adjacent process memory over the network. The crash variant fires on the first</p> <p>packet.</p> https://vulnerability.circl.lu/vuln/cve-2026-102712