PT-2026-113984

nx secure x509 parse signature data computes the certificate signature's length as tlv length - 1 without first checking that tlv length is non-zero. A certificate whose signature is an empty ASN.1 BIT STRING therefore parses successfully and leaves the certificate holding a signature length of...

PT-2026-102770

Name of the Vulnerable Software and Affected Versions NetX Secure affected versions not specified Description An issue exists in the nx secure x509 asn1 tlv block parse function, which is used to parse ASN.1 TLV tag-length-value blocks from DER-encoded data during X.509 certificate parsing in TLS...

PT-2026-102772

Name of the Vulnerable Software and Affected Versions NetX Secure affected versions not specified Description When built with NX SECURE KEY CLEAR, the software wipes every TLS record sent on an active session after it is handed to TCP. Because the TCP layer may have already released the packet...

PT-2026-102771

Name of the Vulnerable Software and Affected Versions NetX Secure TLS affected versions not specified Description NetX Secure TLS accepts empty application-data records without verifying the message authentication code MAC. Within the nx secure verify mac function, a decrypted application record...

PT-2025-42316

Name of the Vulnerable Software and Affected Versions NetX Duo versions prior to 6.4.4 Description An out-of-bounds read issue exists in the Eclipse Foundation ThreadX component of NetX Duo, specifically within the nx secure tls process clienthello function. This is due to a missing validation of...

PT-2025-42315

Name of the Vulnerable Software and Affected Versions Eclipse Foundation NextX Duo versions prior to 6.4.4 Description The nx secure tls process clienthello function lacked proper length verification for the ciphersuite length and compression method length within SSL/TLS client hello messages. An...