CVE-2026-33845 — Gnutls: gnutls: denial of service via dtls zero-length fragment
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an ou…
Published: 2026-04-30 · CVSS: 7.5 · CVSS 3.1
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7