PT-2026-141225

Ettercap through 0.8.4.1 contains a heap out-of-bounds read vulnerability in sslw get clienthello sni in src/ec sslwrap.c that trusts the unchecked 16-bit SNI length field. Network-adjacent attackers can send crafted TLS ClientHello messages during SSL interception to leak up to 64 KB of heap...