CVE-2026-88840

Description

BusyBox TLS get_client_hello() reads past the end of the input buffer when parsing a truncated ClientHello message.

References

• https://access.redhat.com/security/cve/CVE-2026-88840
• https://bugzilla.redhat.com/show_bug.cgi?id=2531354