Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2026-5448

1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
wolfSSL

Description

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

wolfSSL wolfSSL

Default version status: unaffected

  • 0 to < 5.9.1affected

References