Executive brief
BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.
Junglewise Threat Intelligence
CVE-2026-88840: BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.
CVE-2026-88840 · Severity: medium · CVSS 5.3 · Published 2026-09-23