CVE-2025-65500: Null Pointer Dereference
Published Nov 24, 2025
·Updated
NULL pointer dereference in coapdtlsgeneratecookie() in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSLgetSSLCTX() to return NULL.
Affected Software
2 affected components
OISM libcoap
libcoap libcoap=4.3.5
Remediation
Patch Available
Event History
Nov 24, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-65500?
CVE-2025-65500 has a severity rating that indicates a denial of service vulnerability due to a NULL pointer dereference.
2
How do I fix CVE-2025-65500?
To fix CVE-2025-65500, upgrade to the latest version of OISM libcoap that addresses this vulnerability.
3
Who is affected by CVE-2025-65500?
Users of OISM libcoap version 4.3.5 are affected by CVE-2025-65500.
4
What attack vector is utilized in CVE-2025-65500?
CVE-2025-65500 can be exploited through a crafted DTLS handshake that triggers the vulnerability.
5
What is the potential impact of CVE-2025-65500?
The potential impact of CVE-2025-65500 is a denial of service that disrupts the normal functioning of the affected software.