Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Jaehun Lee

#21437of 60,387
14.5Total CVSS
Vulnerabilities · 3
N/A
1
Medium
1
Critical
1
PT-2026-144178
2026-11-10
N/A
CVE-2026-88822
Openssl
Openssl
The OpenSSL QUIC stack contains a flaw in its automated peer detection mechanism used during the SSL handshake when utilizing an already connected socket. The process employs the `getpeername()` function with a buffer length that prevents the retrieval of larger addresses, such as IPv6. However, because the function returns the full address length and the system accepts this as the valid input buffer length, the address buffer may contain uninitialized stack data instead of the actual peer address. This results in the use of an invalid address for outgoing packets, causing connection loss and the disclosure of uninitialized stack data to passive network observers.
PT-2026-29611
2026-04-01
9.1
CVE-2026-34873
Arm
Mbed Tls
A security issue was identified that allows client impersonation during TLS 1.3 session resumption.
PT-2025-47822
2025-11-21
5.4
CVE-2025-12889
Openssl
Openssl
With TLS 1.2 connections, a client can utilize any digest algorithm, including weaker ones that are supported, instead of adhering to the digests specified in the CertificateRequest.