CVE-2026-63566

Memory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliableHandshake, DtlsReassembler) in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote unauthenticated DTLS peer to cause a denial of service through memory exhaustion via crafted handshake message fragments, because the reassembly buffer for each incoming handshake message was allocated at the 24-bit length declared in the fragment header, without the check against the peer's maximum handshake message size that TLS already applied. A fragment carrying no payload can force an allocation of almost 16 MB, for each of up to 16 pending messages per handshake, before the handshake is authenticated. DTLS servers and DTLS clients are both affected; TLS is not.

• CWE-789

• https://github.com/bcgit/bc-csharp/commit/212d06474166d5e85be72c2dd4898313aa5dd5f3Patch
• https://github.com/bcgit/bc-csharp/commit/99afef612458f70f28e7824a09719bfc3a169bdaPatch
• https://github.com/bcgit/bc-csharp/wiki/CVE-2026-63566Patch, Vendor Advisory

Published

Oct 2, 2026

Last Modified

Oct 27, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-63545Sharp and Toshiba Tec MFPs (multifunction printers) caches d…2.4
• CVE-2026-6355A vulnerability in the web application allows unauthorized u…6.5
• CVE-2026-63550The MMS BER decoder contains a boundary-handling flaw in the…6.5
• CVE-2026-63559An integer overflow in the UA_Variant arrayDimensions produc…7.5
• CVE-2026-6356A vulnerability in the web application allows standard users…9.6
• CVE-2026-63563Sharp and Toshiba Tec MFPs (multifunction printers) for a ce…6.9
• CVE-2026-63567Observable discrepancy in IesEngine.DecryptBlock in Legion o…7.5
• CVE-2026-63568Allocation of resources without limits or throttling in the …7.5
• CVE-2026-63569Improper input validation in DHAgreement.CalculateAgreement …6.5
• CVE-2026-6357pip prior to version 26.1 would run self-update check functi…5.3
• CVE-2026-63570Loop with unreachable exit condition in Pkcs12Store.GetCerti…7.5
• CVE-2026-63571Improper verification of cryptographic signature in the attr…7.5