VYPR

TSIP TLS 1.3

by Renesas

CVEs (1)

  • CVE-2026-55958HigJun 25, 2026
    risk 0.42cvss 7.5epss 0.00

    Out-of-bounds write in the Renesas TSIP TLS 1.3 transcript buffer. In tsip_StoreMessage() the capacity check guarding the fixed message bag (MSGBAG_SIZE) sets an error code but fails to return, so execution falls through to an XMEMCPY that writes past the end of the buffer once…