The function that parses ASN.1 tag‑length‑value blocks in NetX Secure reads the first tag byte before checking that the caller supplied at least one byte of data. When an attacker supplies a zero‑length buffer during a TLS handshake, the function reads past the end of the caller’s buffer, yielding a buffer over‑read flaw categorized as CWE‑126. The resulting read could expose adjacent memory contents or cause a crash at the point where certificate parsing is invoked. The impact is therefore a mix of potential information leakage and denial of service, both triggered during normal TLS negotiation with a remote peer.

The flaw affects the Eclipse Foundation’s NetX Duo product, specifically the NetX Secure TLS implementation. Version information is not disclosed in the advisory, so any installation that has not yet applied a recent update could be vulnerable.

The CVSS score of 7.5 indicates a high severity, and the EPSS score of < 1% shows low exploitation likelihood. The vulnerability is not listed in the CISA KEV catalog, indicating no known public exploitation. Nevertheless, the flaw is reachable through a remote client that initiates a TLS session and provides a malformed certificate. Successful exploitation would require the attacker to control the certificate presented to the server, which is common in TLS handshake attacks. Given the remote nature of the vector and the high potential impact, the risk level remains high until a vendor patch is applied.