CVE-2025-65494

CVE-2025-65494 affects libcoap (notably libcoap 4.3.5 and Fedora 4.3.5a packages). It stems from a NULL pointer dereference in get_san_or_cn_from_cert() inside src/coap_openssl.c, which can be triggered by a crafted X.509 certificate and may cause a denial of service. The vulnerability is reporte...