Security Advisory

CVE-2026-42015

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-26 21:29:32
Last updated 2026-07-22 15:07:55
Assigner redhat
CVSS score not scored
State PUBLISHED

Description

A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.