CVE-2025-65501

CVE-2025-65501 affects libcoap 4.3.5. The issue is a null pointer dereference in coap_dtls_info_callback() during a DTLS handshake when SSL_get_app_data() returns NULL, enabling potential denial of service. Fedora advisories indicate that updates to 4.3.5a are released for Fedora 42/43; Nessus/Op...

CVE-2025-65501

Null pointer dereference in coapdtlsinfocallback in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS handshake where SSLgetappdata returns NULL...