Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-5393

OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS

Description

Dual-Algorithm CertificateVerify out-of-bounds read. When processing a dual-algorithm CertificateVerify message, an out-of-bounds read can occur on crafted input. This can only occur when --enable-experimental and --enable-dual-alg-certs is used when building wolfSSL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

wolfSSL wolfSSL

Default version status: unaffected

  • 0 to < 5.9.1affected

References