PT-2026-61698 · Undefined · Undefined

CVE-2025-35588

Published

2026-07-20

Updated

2026-07-20

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

you don't need to overthink this 💡

an 11-byte TLS request can freeze server memory.

that's the OpenSSL HollowByte vulnerability.

here's what happened:

a high-severity flaw (CVE-2025-35588) discovered in OpenSSL versions 3.4.0, 3.3.0 to 3.3.3, 3.2.0… https://t.co/yXNb1p6oxS

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2025-35588

Undefined