Vulnerability Description
The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first establishing that the message has a byte to skip. A zero-length Certificate message therefore wraps the unsigned length to `0xFFFFFFFF`, which makes the bounds check that follows vacuous and sends the parser reading past the session packet buffer. The trigger is a four-byte handshake header and requires no cryptographic validity. It is reachable pre-authentication.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-92853?
CVE-2026-92853 is a documented vulnerability. The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first establishing that the message has a byte to skip. A zero-length Certificate mes...
How severe is CVE-2026-92853?
CVSS scoring is not yet available for CVE-2026-92853. Check NVD for updates.
Is there a patch for CVE-2026-92853?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.