CVE-2026-94200 TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl

Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl tlshandshake13, sslhandshake and tlsclientticketstore modules allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. The TLS 1.3 client decodes the extensions of a...

EEF-CVE-2026-94200 TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl

Summary Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl tlshandshake13, sslhandshake and tlsclientticketstore modules allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. The TLS 1.3 client decodes the extensions...