CVE-2026-42015: gnutls28 Off-by-one Error

CVSS: 5.3v3.1MediumAwaiting analysis

AliasesALPINE-CVE-2026-42015UBUNTU-CVE-2026-42015DEBIAN-CVE-2026-42015

Published 26-05-2026Last modified 14-10-2026

Vulnerability summary

CVE-2026-42015 is a medium (CVSS 5.3) Off-by-one Error vulnerability in gnutls28. EPSS estimates a 0.92% chance of exploitation in the next 30 days, higher than 59.6% of scored vulnerabilities.

Overall risk

21/100

0100

Low · default modelHow is this calculated?

CVSS score

5.3/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.92%

0%100%

Low · +0.19 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 17 · Related 6

OPENSUSE-SU-2026:10691-1 RHSA-2026:13274 RHSA-2026:20611 RHSA-2026:20612 RHSA-2026:20613 RHSA-2026:26409+12 more

Timeline

26-05-2026
PublishedVulnerability first disclosed.
14-10-2026
Last modifiedVulnerability information updated.

Description

A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of service (DoS) or potentially other unspecified impacts.

CVSS metrics

5 scores · 5 sources · 1 version

v3.15.3

EPSS trend

Probability

0.92%

Chance of exploitation in the next 30 days

Percentile

60%

Versus all other CVEs

30-day change

+0.19 pp

From 0.73% on 20-09-2026

20-09-202620-10-2026

EPSS score

0.92%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-193Off-by-one ErrorA product calculates or uses an incorrect maximum or minimum value that is 1 more, or 1 less, than the correct value.

Affected systems

Alpine1 product

gnutls< 3.8.13-r0

Debian1 product

gnutls28< 3.7.9-2+deb12u7 | < 3.8.9-3+deb13u4 | < 3.8.13-1

Ubuntu1 product

gnutls28< 3.4.10-4ubuntu1.9+esm4 | < 3.5.18-1ubuntu1.6+esm4 | < 3.6.13-2ubuntu1.12+esm3 | < 3.7.3-4ubuntu1.9 | All versions (No fix recorded) | < 3.7.3-4ubuntu1.9+Fips1 | < 3.8.3-1.1ubuntu3.6 | < 3.8.3-1.1ubuntu3.6+Fips1.2 | < 3.8.9-3ubuntu2.2 | < 3.8.12-2ubuntu1.1

3 vendors · 3 products