Out-of-Bounds Read Vulnerability in Eclipse TinyDTLS Affects Unauthenticated Users
CVE-2026-9267
6.9MEDIUM
What is CVE-2026-9267?
Eclipse TinyDTLS prior to commit b3efd41ad111a4920f599f51ffa4f5e9f1e72221 is affected by an out-of-bounds read vulnerability within the check_server_certificate() function. This flaw allows unauthenticated attackers to manipulate Certificate handshake messages by specifying a fragment_length value that triggers out-of-bounds reads. The absence of proper buffer length validation prior to memory operations such as uint24 reads and comparisons can lead to denial of service, particularly impacting memory-constrained devices during DTLS epoch 0. Ensuring timely patching is crucial to mitigate these risks.
Affected Version(s)
Eclipse tinydtls 0
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Kazuma Matsumoto, a security researcher at GMO Cybersecurity by IERAE, Inc.