CVE-2026-33845

critical

Description

A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.

References

https://access.redhat.com/errata/RHSA-2026:82888

https://access.redhat.com/errata/RHSA-2026:82857

https://access.redhat.com/errata/RHSA-2026:82372

https://access.redhat.com/errata/RHSA-2026:82354

https://access.redhat.com/errata/RHSA-2026:82347

https://access.redhat.com/errata/RHSA-2026:82322

https://access.redhat.com/errata/RHSA-2026:82304

https://access.redhat.com/errata/RHSA-2026:74674

https://access.redhat.com/errata/RHSA-2026:72502

https://access.redhat.com/errata/RHSA-2026:65839

https://access.redhat.com/errata/RHSA-2026:60019

https://access.redhat.com/errata/RHSA-2026:59831

https://access.redhat.com/errata/RHSA-2026:58981

https://access.redhat.com/errata/RHSA-2026:57483

https://access.redhat.com/errata/RHSA-2026:57402

https://access.redhat.com/errata/RHSA-2026:56911

https://access.redhat.com/errata/RHSA-2026:56853

https://access.redhat.com/errata/RHSA-2026:56786

https://access.redhat.com/errata/RHSA-2026:41921

https://access.redhat.com/errata/RHSA-2026:36006

https://access.redhat.com/errata/RHSA-2026:36005

https://access.redhat.com/errata/RHSA-2026:36004

https://access.redhat.com/errata/RHSA-2026:34372

https://access.redhat.com/errata/RHSA-2026:33125

https://access.redhat.com/errata/RHSA-2026:32962

https://access.redhat.com/errata/RHSA-2026:30850

https://access.redhat.com/errata/RHSA-2026:30849

https://access.redhat.com/errata/RHSA-2026:30004

https://access.redhat.com/errata/RHSA-2026:29197

https://access.redhat.com/errata/RHSA-2026:26409

https://access.redhat.com/errata/RHSA-2026:26319

https://access.redhat.com/errata/RHSA-2026:20613

https://access.redhat.com/errata/RHSA-2026:20612

https://access.redhat.com/errata/RHSA-2026:20611

https://access.redhat.com/errata/RHSA-2026:13274

Details

Source: Mitre, NVD

Published: 2026-04-30

Updated: 2026-10-14

Risk Information

CVSS v2

Base Score: 9.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:C

Severity: High

CVSS v3

Base Score: 9.1

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Severity: Critical

EPSS

EPSS: 0.00886