CVE-2026-58227: erlang/otp from 23.2 (inclusive), before 27.3.4.15 (exclusive), from 28.0 (inclusive), before 28.5.0.4 (exclusive)…

Affected technology

erlang/otp · from 23.2 (inclusive), before 27.3.4.15 (exclusive)
erlang

erlang/otp · from 28.0 (inclusive), before 28.5.0.4 (exclusive)
erlang

erlang/otp · from 29.0 (inclusive), before 29.0.4 (exclusive)
erlang

erlang/ssl · from 10.2 (inclusive), before 11.2.12.11 (exclusive)
erlang

erlang/ssl · from 11.3 (inclusive), before 11.6.0.4 (exclusive)
erlang

erlang/ssl · from 11.7 (inclusive), before 11.7.4 (exclusive)
erlang

OTP · 10.2 to before *; status changes: 11.7.4 — unaffected, 11.6.0.4 — unaffected, 11.2.12.11 — unaffected
Erlang

OTP · 23.2 to before *; status changes: 29.0.4 — unaffected, 28.5.0.4 — unaffected, 27.3.4.15 — unaffected, addc42df113f8f15fc20e9dff45490b3ce0d3d6b to before *; status changes: 7db64720177961e04545681480d691c4be81c54d — unaffected, 241d43703989fec4b6bf637beaeb366d92dcc4c2 — unaffected, 0307bff2c72b685c6bd952daaac6bd661c247d62 — unaffected
Erlang

Component: ssl_certificate
Function: ssl_certificate:handle_incomplete_chain/5, ssl_certificate:build_certificate_chain/5, ssl_certificate:do_certificate_chain/7
File: src/ssl_certificate.erl, lib/ssl/src/ssl_certificate.erl

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated remote attacker can send a crafted certificate chain in a TLS or DTLS Certificate handshake message to exhaust available memory and crash the BEAM node. Source advisory’s CVSS 4.0 assessment (base score 8.7/10) rates confidentiality and integrity impact as none; availability impact as high.