GHSA-5vrv-8j5h-h6h6: Potential out of bound read in _nx_secure_tls_process_clienthello()

GHSA ID

GHSA‑5vrv‑8j5h‑h6h6

CVE ID

CVE‑2025‑55081

Severity

Medium

CWE

CWE-126

Published

2025‑10‑15

Last updated

2025‑10‑15

Affected packages

Package Vulnerable versions Patched versions

NetX Duo

⇐ 6.4.3

6.4.4

Description

The _nx_secure_tls_process_clienthello() was missing length verification of certain SSL/TLS client hello message: the ciphersuite length and compression method length. In case of an attacker-crafted message with values outside of the expected range, it could cause an out-of-bound read.