Memory Management Flaw in NetX Secure Affects Data Integrity for Users

CVE-2026-102760

What is CVE-2026-102760?

A significant memory management issue exists in NetX Secure when built with the NX_SECURE_KEY_CLEAR option. This flaw leads to the unintended clearing of TLS records sent during active sessions. After a TLS record is processed, the associated data is wiped clean, potentially affecting different threads and causing corrupted packet data to be written into memory. As these packets may already be reallocated or utilized elsewhere, reusing a packet with pointers that no longer reference valid data can lead to memory underflows and application instability. This vulnerability emphasizes the importance of secure data handling and memory management in network communication.

References