OpenSSL SSL_select_next_proto overread (CVE-2024-5535)

Summary

An out-of-bounds read during ALPN negotiation can crash the server.

Vulnerability ID	Vulnerability Overview
CVE-2024-5535	When negotiating ALPN/NPN protocols, the SSL_select_next_proto function can over-read a buffer if provided with crafted protocol lengths, causing a crash.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices