{"affected":[{"defaultStatus":"unaffected","product":"NTPsec","source":"CNA: GitLab","vendor":"NTPsec","versions":[{"lessThan":"1.2.4","status":"affected","version":"1.1.4","versionType":"semver"}]}],"cveId":"CVE-2026-121505","cwes":["CWE-125"],"description":"An out-of-bounds read in the NTS-KE client response parser (nts_client_process_response_core) in NTPsec before 1.2.4 allows a malicious NTS-KE server to read the client's stack memory, including pointers that defeat ASLR, which the client then sends in cleartext as NTS cookies, via an NTS-KE record whose declared length exceeds the data received.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":3.7,"severity":"low","source":"CNA: GitLab","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}],"modifiedAt":1793715429654,"publishedAt":1793715429654,"references":[{"source":"CNA: GitLab","tags":[],"url":"https://gitlab.com/NTPsec/ntpsec/-/commit/caf0eb5df3c6ddbfc2941389bff0f9146835c021"},{"source":"CNA: GitLab","tags":[],"url":"https://gitlab.com/NTPsec/ntpsec/-/work_items/836"},{"source":"CNA: GitLab","tags":[],"url":"https://gitlab.com/NTPsec/ntpsec/-/work_items/902"}],"remediation":[{"kind":"fix","source":"CNA: GitLab","text":"Upgrade to version 1.2.4 or above."}],"revision":"d220d299ce95763daf85448c5263a9832524d99b50cae8313e35c2a2c727cf8c","sources":[{"modifiedAt":1793715429654,"name":"CNA: GitLab","retrievedAt":1793718603936,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121505"}],"ssvc":null,"status":"published","title":"Out-of-bounds Read in NTPsec","updatedAt":1793718603936}