CVE-2026-94200

Name of the Vulnerable Software and Affected Versions Erlang OTP versions 23.3 through 27.3.4.18 Erlang OTP versions 28.0 through 28.5.0.7 Erlang OTP versions 29.0 through 29.1.1 ssl versions 10.3 through 11.2.12.13 ssl versions 11.6.0 through 11.6.0.6 ssl versions 11.7.0 through 11.7.7

Description Improper validation of consistency within input in the tls handshake 1 3, ssl handshake, and tls client ticket store modules allows a malicious TLS 1.3 server to cause a denial of service of the ssl application on the client node. The TLS 1.3 client incorrectly decodes extensions of a NewSessionTicket message as if they were EncryptedExtensions, accepting a 0-length early data extension. When {session tickets, auto} is enabled, the client stores this ticket in the node-global tls client ticket store. During subsequent automatic resumption, the function tls handshake 1 3:get max early data/1 crashes the store with a case clause. Because the supervisor uses a rest for one strategy, repeated crashes can exceed the restart intensity and shut down the ssl application for all connections on the node.

Recommendations Update Erlang OTP to version 27.3.4.19, 28.5.0.8, or 29.1.2. Update ssl to version 11.2.12.14, 11.6.0.7, or 11.7.8. As a temporary workaround, do not set {session tickets, auto} on TLS 1.3 clients; instead, use manual ticket handling or keep the default disabled value.