CERT24CVE-2026-5260 — GnuTLS: information disclosure via heap overread in RSA key exchangeLoading data…
CERT24Threat Observatory
Period

CVE-2026-5260 — GnuTLS: information disclosure via heap overread in RSA key exchange

A flaw was found in GnuTLS in which a remote attacker could send an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token. This could trigger a short heap overread and lead to information disclosure.

← Back to intelligence

CVE-2026-5260 — GnuTLS: information disclosure via heap overread in RSA key exchange

A flaw was found in GnuTLS in which a remote attacker could send an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token. This could trigger a short heap overread and lead to information disclosure.