CVE-2021-34430: Eclipse Tinydtls

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Eclipse TinyDTLS through 0.9-rc1 relies on the rand function in the C library, which makes it easier for remote attackers to compute the master key and then decrypt DTLS traffic.

Affected products

• Eclipse Tinydtls: up to and including 0.8.2; version 0.9 only

Published 2021-07-08. Last modified 2026-06-17.