CVE-2025-65497

Name of the Vulnerable Software and Affected Versions libcoap version 4.3.5

Description A flaw exists in libcoap that can lead to a denial of service. Specifically, a NULL pointer dereference in the coap dtls generate cookie() function, located in src/coap openssl.c, occurs when processing a crafted DTLS handshake. The issue arises when SSL get SSL CTX() returns NULL.

Recommendations Update to a newer version that contains a fix for this vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.