Buffer Over-read Vulnerability in NetX Secure X.509 Certificate Parsing

CVE-2026-102758

What is CVE-2026-102758?

A buffer over-read vulnerability exists in the _nx_secure_x509_asn1_tlv_block_parse() function of NetX Secure, which processes ASN.1 TLV blocks from DER-encoded data. This function is critical for parsing X.509 certificates during TLS handshakes. It improperly reads a one-byte ASM.1 tag before verifying the buffer's length, potentially leading to security risks when a remote peer supplies a certificate. If a length of zero is provided, the function will attempt to read beyond the buffer's limits, creating vulnerabilities in the system. Proper safeguards should be employed to prevent this situation and ensure the integrity of data being processed during cryptographic communications.

References