CVE-2026-92853
Received Received - Intake

TLS 1.3 Certificate Parser Length Underflow in NetX Secure

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: Eclipse Foundation

Description
The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first establishing that the message has a byte to skip. A zero-length Certificate message therefore wraps the unsigned length to `0xFFFFFFFF`, which makes the bounds check that follows vacuous and sends the parser reading past the session packet buffer. The trigger is a four-byte handshake header and requires no cryptographic validity. It is reachable pre-authentication.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-20
Generated
2026-10-20
AI Q&A
2026-10-20
EPSS Evaluated
N/A
NVD
CVE-2026-92853
EUVD
EUVD-2026-105133

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Eclipse Foundation Eclipse ThreadX - NetX Duo 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
CWE-191 The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a flaw in the TLS 1.3 Certificate-message parser in NetX Secure. When processing a zero-length Certificate message, the parser incorrectly decrements the message length to skip a non-existent context byte. This causes the unsigned length to wrap around to 0xFFFFFFFF, bypassing bounds checks and leading to out-of-bounds memory access during packet parsing.

Impact Analysis

This vulnerability can allow attackers to trigger out-of-bounds memory reads by sending a maliciously crafted TLS 1.3 Certificate message. Since it is reachable pre-authentication, it could potentially lead to denial-of-service conditions or unauthorized access to sensitive data in systems using affected NetX Secure implementations.

Mitigation Strategies

Update NetX Secure to a patched version that fixes the TLS 1.3 Certificate-message parser issue. Disable TLS 1.3 if not required or use a firewall to block malformed Certificate messages.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-92853. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart