logo

OpenSSL Flaw Could Expose Heap Memory and Crash Applications

ID: b994d497-e722-5a94-8bc9-ad527dddd6fd

STIX ID: report--b994d497-e722-5a94-8bc9-ad527dddd6fd

Feed Name: The Cyber Express

Threat Score
65/100

Date Published: 2026-09-30

Date Updated: 2026-09-30

Author: Ashish Khaitan

...
...

OpenSSL disclosed CVE-2026-84782, a high-severity DTLS retransmission bug that can cause out-of-bounds reads and potentially leak heap memory to remote peers or crash applications; it affects multiple OpenSSL branches (4.0, 3.6, 3.5, 3.4, 3.0, 1.1.1, 1.0.2) and is fixed in specific releases (e.g., 4.0.3, 3.6.5, 3.5.9, 3.4.8, 3.0.23, 1.1.1zj, 1.0.2zs), and organizations are advised to upgrade DTLS-using software promptly.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.