PT-2026-46386 · Unknown · Network Sockets Subsystem

Pdgendt · Published 2026-06-04 · Updated 2026-06-04 · CVE-2026-5066

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Network sockets subsystem (affected versions not specified)

Description An out-of-bounds write and read issue exists in the TLS socket connect path within the network sockets subsystem, specifically in the subsys/net/lib/sockets/sockets tls.c file. When the TLS session cache is enabled, the functions tls session store() and tls session restore() use memcpy to copy a caller-supplied address into a fixed-size buffer. Because the addrlen value is controlled by the caller and not validated against the destination size, an application can provide an addrlen larger than the struct net sockaddr size. This allows the operation to read and write past the end of the address memory used by the TLS session cache, which can result in a system crash, denial of service, or potential arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-5066

Affected Products

Network Sockets Subsystem

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-5066 · Security Note
• https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-wgrc-jrf6-24f3 · Note
• https://twitter.com/VulmonFeeds/status/2062668776777146504 · Twitter Post