PT-2026-26313 · Wolfssl · Wolfssl
Prasanth Sundararajan
·
Publicado
2026-03-19
·
Atualizado
2026-03-23
·
CVE-2026-1005
CVSS v3.1
5.3
Média
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
wolfSSL versions prior to 5.8.4
Description
An integer underflow in the packet sniffer component of wolfSSL allows an attacker to cause a buffer overflow in the AEAD decryption path. This occurs when a TLS record shorter than the expected length is injected into traffic inspected by
ssl DecodePacket. The underflow results in a large value being passed to AEAD decryption routines, leading to a heap buffer overflow and a crash. An unauthenticated attacker can trigger this remotely via malformed TLS Application Data records. The vulnerable component is the AEAD decryption path, specifically during the processing of TLS records. The vulnerable function is ssl DecodePacket. The IV (Initialization Vector) and authentication tag are involved in the length calculation that is susceptible to the underflow.Recommendations
wolfSSL versions prior to 5.8.4 should be updated.
Correção
Integer Underflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wolfssl