CVE-2026-102486 — Out-of-bounds Read in ntpsec
Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extensio…
Published: 2026-10-21 · CVSS: 7.5 · CVSS 3.1
Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash the daemon via an NTS Authenticator and Encrypted Extension Fields (AEEF) field with an oversized nonce length.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7