CVE-2026-102712

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-102712
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-102712.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-102712
Aliases
  • GHSA-5xr3-wpxf-rw5q
Published
2026-09-29T17:39:31Z
Modified
2026-10-01T03:30:58Z
Severity
  • 8.8 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
[none]
Details

On the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the

ciphersuite-list length against the total record length instead of the remaining bytes. An unauthenticated

peer drives an OOB source read of up to 255 bytes, and those bytes are echoed verbatim into the outgoing

ServerHello, disclosing adjacent process memory over the network. The crash variant fires on the first

packet.

Database specific 
{
    "cna_assigner":  "eclipse",
    "cwe_ids":  [
        "CWE-125"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102712.json"
}
References

Affected packages

Git / github.com/eclipse-threadx/netxduo

Affected ranges

Type
GIT
Repo
https://github.com/eclipse-threadx/netxduo
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
1a0e9e43a03e37ddecfb6b49e9b078d6e1803d05
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "6.5.1.202602"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

v.*
v.6.4.4.202503_rel
v6.*
v6.0.1_rel
v6.0.2_rel
v6.0_rel
v6.1.10_rel
v6.1.11_rel
v6.1.12_rel
v6.1.2_rel
v6.1.3_rel
v6.1.4_rel
v6.1.5_rel
v6.1.6_rel
v6.1.7_rel
v6.1.8_rel
v6.1.9_rel
v6.1_rel
v6.2.0_rel
v6.2.1_rel
v6.3.0_rel
v6.4.0_rel
v6.4.1_rel
v6.4.2_rel
v6.4.3_rel
v6.4.4.202503a
v6.4.5.202504_rel
v6.5.0.202601_rel
v6.5.1.202602_rel

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-102712.json"