CVE-2026-54908: pion dtls Out-of-bounds Read
CVSS: 6.3v4.0MediumAwaiting analysis
AliasesUBUNTU-CVE-2026-54908DEBIAN-CVE-2026-54908CGA-2hw7-w253-vwgcCGA-46q5-fhf2-3frjCGA-46w7-j3v8-xx36CGA-4g32-w6w6-2w4jCGA-4rqc-q3jr-7fjqCGA-556g-wv2x-9w3cCGA-59wc-rq88-q23xCGA-6343-wf53-p7vvCGA-64xf-9fg5-3ch2CGA-74rv-92pv-98xcCGA-7f87-42j7-x346CGA-7ph2-75xp-qj5qCGA-8ff2-fq4r-j2j9CGA-9vc8-3cpg-56pqCGA-cv3v-v9cj-469vCGA-frp9-fq8h-9qjfCGA-gwf4-5mrp-cvppCGA-m3r5-4rr5-2cgxCGA-mcq5-2p7q-q3fwCGA-mj58-245p-vw3gCGA-pf67-57w5-p256CGA-pjvh-3c4w-m4rxCGA-q26r-798w-x2r8CGA-qj63-v7pj-32hwCGA-qmh9-hv3m-h99wCGA-rmpf-9f57-grjrCGA-rx5p-w939-5gh3CGA-v6qr-8qcv-3r82CGA-vrr9-49fg-qwfgCGA-vwcw-33q4-w3x7CGA-vwm8-p96g-2jhqCGA-vwpx-qg7g-j9f5CGA-wq53-j4m7-cp9cCGA-x859-p4w6-qg56CGA-xf9h-6cqp-xmg3CGA-xmr2-x6j9-f3prGHSA-wg4g-wm44-ch5jGO-2026-6165CGA-22rm-6pg2-vcc5CGA-28mp-679h-c57vCGA-2vgv-mrvv-hrxvCGA-33vw-977g-fq6wCGA-34g3-xvx7-588vCGA-34rj-cjqx-g363CGA-3rxv-6483-7jcwCGA-3x36-7jv4-3cgrCGA-4mw4-wc56-89fxCGA-756h-3hph-vx2qCGA-759x-2rp8-cmrcCGA-7vmq-qj26-5gcgCGA-84gv-627m-4f3wCGA-8ffm-76c3-wfh2CGA-8v58-3x88-9pgqCGA-c59g-fpv5-2rp5CGA-g9m4-5844-j9mgCGA-gxr2-98h6-hxhjCGA-h452-65mx-65crCGA-h8vw-vrxq-764xCGA-hg8q-379g-vfggCGA-hv8h-ghjp-28mvCGA-jr58-88vc-jvx7CGA-p38m-v8xr-xg5gCGA-pghm-hrc6-9qv2CGA-pq9m-cwrc-j337CGA-q6c8-78x2-2j93CGA-r2rc-822j-h3whCGA-r82m-r63q-844qCGA-rr42-43g6-q6xwCGA-vhg7-g6f8-33ffCGA-vmjx-73p9-74jwCGA-vqjm-96m8-fpxfCGA-x5g3-6398-7536CGA-xwmq-8g9f-jqm7CGA-xx6v-6hp4-q5g3
Published 01-07-2026Last modified 02-07-2026
Vulnerability summary
CVE-2026-54908 is a medium (CVSS 6.3) Out-of-bounds Read vulnerability in pion dtls. EPSS estimates a 0.54% chance of exploitation in the next 30 days, higher than 44.3% of scored vulnerabilities.
CVSS score
6.3/10
010
Medium · v4.0 (CVE.org)EPSS score
0.54%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2 · Related 3Timeline
- 01-07-2026PublishedVulnerability first disclosed.
- 02-07-2026Last modifiedVulnerability information updated.
Description
Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. This issue has been fixed in version 3.1.4.
CVSS metrics
7 scores · 7 sources · 1 versionMedium 6.3Preferred score · CVE.org (CNA)
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:NSourcesAll 7 agree
- OSV · UbuntuEcosystem advisory · calculated6.3MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- OSV · DebianEcosystem advisory · calculated6.3MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- OSV · WolfiEcosystem advisory · calculated6.3MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- OSV · GoEcosystem advisory · calculated6.3MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- OSV · ChainguardEcosystem advisory · calculated6.3MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
- NVDNIST6.3MediumCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS trend
Probability
0.54%
Chance of exploitation in the next 30 days
Percentile
44%
Versus all other CVEs
30-day change
0.00 pp
From 0.54% on 18-09-2026
18-09-202618-10-2026
EPSS score0.54%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Chainguard32 products
- ipfs-cluster< 1.1.6-r12 | < 1.1.6-r18
- ipfs-cluster-fips< 1.1.6-r10
- k3s< 1.36.2.1-r9
- k3s-1.31All versions (No fix recorded)
- k3s-1.32All versions (No fix recorded)
Wolfi16 products
- ipfs-cluster< 1.1.6-r12 | < 1.1.6-r18
- k3s< 1.36.2.1-r9
- k3s-1.32All versions (No fix recorded)
- k3s-1.33All versions (No fix recorded)
- k3s-1.34< 1.34.9.1-r9
Debian2 products
- golang-github-pion-dtls-v3All versions (No fix recorded)
- golang-github-pion-dtls.v2All versions (No fix recorded)
Ubuntu2 products
- golang-github-pion-dtls-v3All versions (No fix recorded)
- golang-github-pion-dtls.v2All versions (No fix recorded)
Github.com/pion/dtls1 product
- v3< 3.1.4
Pion1 product
- dtls< 3.1.4
6 vendors · 54 products
References
11 links
- github.com/pion/dtlsPACKAGE