CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. It affects OpenSSL. Public exploit code or proof-of-concept references have been detected in its references. It may be remotely exploitable. It may lead to a denial-of-service condition.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
GitHub PoC Links
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2025-65499
Severity
MEDIUM
CVSS
4.3
EPSS
0.26%
OpenSSL
Original NVD Description
Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_ex_data_X509_STORE_CTX_idx() to return -1.
Related CVEs
Other vulnerabilities affecting the same vendor(s)