OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

Reported by The Hacker News ([email protected] (The Hacker News))

Summary by Cyber Security News30 Sep 2026, 10:09 CET

About this summary. This is a short excerpt from the description that The Hacker News published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://thehackernews.com/2026/09/openssl-fixes-high-severity-dtls-flaw.html

A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS, the TLS variant used for UDP traffic, resends a handshake message if no reply arrives before the timer expires. The leak or crash can happen when such a resend starts while a larger handshake message is stuck part-way

Read the full article at The Hacker News →

Source attribution: headline and facts are from The Hacker News (thehackernews.com). Summary method: excerpt of the source description. See our source attribution policy.

Related coverage

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

Bellini Capital CISO on AI security governance and the limits of patching faster

Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers

Bringing Hardware Security Education to All: A Seamless Curriculum Integration Approach

PHP2Shell and the Future of AI-Discovered Vulnerability Disclosure: Evidence, Verification, and Human Authority

Silent Blindness: Fault Vulnerability of Hardware Malware Detectors