CVE-2026-42015

A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.

This vulnerability is rated as Moderate impact because triggering the out-of-bounds write requires an application to parse or manipulate specially crafted PKCS#12 containers containing multiple bag elements, primarily resulting in a denial of service. Standard TLS network handshakes on Red Hat Enterprise Linux do not process PKCS#12 files by default. Consequently, only workloads or administrative tools configured to import or inspect untrusted certificate packages are exposed to potential memory corruption or crashes.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.