CVE-2025-65500

Name of the Vulnerable Software and Affected Versions libcoap version 4.3.5

Description A flaw exists in libcoap that allows for a denial of service. Specifically, a NULL pointer dereference in the coap dtls generate cookie() function, located in src/coap openssl.c, can be triggered by a crafted DTLS handshake. This occurs when SSL get SSL CTX() returns NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.