CVE-2026-42015

A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.
Configurations

No configuration.

History

14 Oct 2026, 20:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82857 -
  • () https://access.redhat.com/errata/RHSA-2026:82888 -

14 Oct 2026, 04:18

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:82304 -
  • () https://access.redhat.com/errata/RHSA-2026:82322 -
  • () https://access.redhat.com/errata/RHSA-2026:82347 -
  • () https://access.redhat.com/errata/RHSA-2026:82354 -
  • () https://access.redhat.com/errata/RHSA-2026:82372 -

02 Oct 2026, 03:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:74674 -

29 Sep 2026, 01:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:72502 -

Information

Published : 2026-05-26 22:16

Updated : 2026-10-14 20:17


NVD link : CVE-2026-42015

Mitre link : CVE-2026-42015

CVE.ORG link : CVE-2026-42015


JSON object : View

Products Affected

No product.

CWE
CWE-193

Off-by-one Error