CVE-2026-54908 — Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

CVE-2026-54908

Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message PUBLISHED

Description (CNA)

Pion DTLS is a Go implementation of Datagram Transport Layer Security. Versions prior to 3.1.4 are vulnerable to Remote Denial of Service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message. This issue has been fixed in version 3.1.4.

Affected (CNA)

Vendor / product	Versions
pion / dtls	affected < 3.1.4

CWE

CWE-125, CWE-248

References

https://github.com/pion/dtls/security/advisories/GHSA-wg4g-wm44-ch5j
https://github.com/pion/dtls/pull/839

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.