CVE-2019-8981: Axtls Project Axtls

Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days.

tls1.c in Cameron Hamilton-Rich axTLS before 2.1.5 has a Buffer Overflow via a crafted sequence of TLS packets because the need_bytes value is mismanaged.

Affected products

• Axtls Project Axtls: before 2.1.5 (fixed in 2.1.5)

Published 2019-03-26. Last modified 2026-06-17.