THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-wg4g-wm44-ch5j (medium) — Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

[GHSA] GHSA-wg4g-wm44-ch5j (medium) — Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

medgithub_advisoriesPublished 2026-07-31

GHSA-wg4g-wm44-ch5j Severity: medium CVE: CVE-2026-54908

Pion DTLS vulnerable to denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message

### Impact Remote denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message.

### Patches Upgrade to v3.1.4 or later. This version includes this patch https://github.com/pion/dtls/pull/839 which fixe

Indicators of compromise

CVE-2026-54908cve

Original source: https://github.com/advisories/GHSA-wg4g-wm44-ch5j