CVE WATCH / VULNERABILITY DETAIL

CVE-2026-93475

UNKNOWNCVSS 0NVD feed

Published 20 October 2026 · tracked since 21 October 2026

Description

The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers dimensioned for the `NX_CRYPTO_MAX_RSA_MODULUS_SIZE` default of 4096 bits. A certificate carrying a larger modulus drives an out-of-bounds write past a file-s

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools