CVE-2025-65501

Null pointer dereference in coapdtlsinfocallback in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS handshake where SSLgetappdata returns NULL...

CVE-2025-65501

A null pointer dereference vulnerability exists in libcoap version 4.3.5 within the coap_dtls_info_callback() function. The root cause is the improper handling of return values from OpenSSL functions during DTLS (Datagram Transport Layer Security) operations; specifically, if SSL_get_app_data() r...