Skip to content
OpenAdvisories

Product · amazon

s2n-tls

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-16318

    QUIC Transport Parameters Memory Leak During HelloRetryRequest in s2n-tls

    The QUIC transport parameters extension handler in s2n-tls incorrectly uses s2n_alloc instead of s2n_realloc to store the peer's transport parameters. When a TLS 1.3 connection goes through a HelloRetryRequest, the handler is called twice on the same connecti…

    amazon s2n-tls