The Hacker NewsThursday · October 1, 2026FREE

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

The Hacker News published a report titled "OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted." According to the headline, OpenSSL has issued a fix for a high-severity vulnerability affecting DTLS, the datagram variant of TLS. The stated effect of the flaw is that it can leak heap memory in unencrypted form. The available source text consists of the article headline and page styling markup; it does not include the article body. As a result, the excerpt does not name a CVE identifier, does not list affected OpenSSL versions, does not identify the patched release, and does not describe the code path, trigger conditions, or whether exploitation requires a specific handshake state. It also does not state who discovered the flaw, whether exploitation has been observed, or what platforms and deployments are affected. No severity score, disclosure timeline, or vendor advisory link is present in the provided text. The only concrete claims supported by the source are that the flaw is in DTLS, that OpenSSL has fixed it, that it is rated high severity, and that it can leak heap memory without encryption.