CVE-2026-97031

Summary

This vulnerability allows attackers to cause memory exhaustion on servers by sending ECH packets with multiple outer extension references, which are not permitted under RFC 9849. The flaw enables a memory amplification attack that can exhaust server resources.

Exploitability

Exploitation requires sending a specially crafted ECH packet with multiple extension references, which is moderately difficult but possible without authentication or user interaction.

Blast radius

If exploited, this vulnerability could cause widespread server resource exhaustion across affected implementations that process ECH packets, potentially leading to denial of service for legitimate users.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed version that properly validates ECH extension references according to RFC 9849 specifications.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.