A resend-timer mistake in OpenSSL's UDP handshake can hand leftover heap bytes to the other side of a DTLS session.
A critical use after free bug in OpenSSL's PKCS7_verify function allows attackers to execute arbitrary code on systems processing crafted…