The flaw in GnuTLS 3.8.13 prevents proper certificate validation, allowing certificates that contain extensions not compliant with RFC standards to be accepted. The description indicates that such certificates may be treated as valid by the library. Based on the description, it is inferred that an attacker could potentially use a forged certificate to impersonate a legitimate peer, thereby bypassing intended authentication checks, though the exact impact on a system’s security is not explicitly stated.

All applications that link with GnuTLS 3.8.13 as part of their TLS stack are affected, regardless of the programming language or platform. This includes both client‑side and server‑side software that relies on the library for secure communication.

The CVSS score of 4.8 indicates moderate severity, while the EPSS score is reported as less than 1%, suggesting a very low probability of exploitation at this time. Based on the description, it is inferred that an attacker would need to supply a forged certificate during the TLS handshake. The likely attack vector is remote, requiring the ability to influence the certificate presented in the handshake, such as by performing a man‑in‑the‑middle or by compromising a party that supplies certificates.