CVE-2026-33845

A flaw in GnuTLS DTLS handshake parsing permits malformed fragments that have a zero length and a non-zero offset. This situation leads to an integer underflow during the reassembly process, resulting in an out-of-bounds read. The issue is remotely exploitable and could cause information disclosure or denial of service.

‍