Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions older than 3.1.4 contain a flaw that triggers a panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. The panic causes the DTLS stack to crash, leading to a remote denial of service. The issue does not allow confidentiality; it reflects improper input handling (CWE‑125) and unchecked return values (CWE‑248).

All deployments of the pion:dtls library with a version lower than 3.1.4 are affected, whether the library is integrated directly or bundled in a higher‑level application. Any system that includes this DTLS implementation is at risk of crashes or dropped connections when the flaw is triggered.

The CVSS score of 6.3 classifies the vulnerability as moderate. The EPSS value is less than 1 %, indicating a very low probability of exploitation as of the latest assessment. The vulnerability is not listed in the CISA KEV catalog, so no. An attacker can trigger the flaw from a remote host by sending a malformed ECDHE_PSK ServerKeyExchange packet to the DTLS endpoint; the risk remains confined to service disruption rather than higher‑level compromise.