PT-2026-26365 · Wolfssl · Wolfssl

Kunyuk + 1 · Publicado 2026-03-19 · Atualizado 2026-04-30 · CVE-2026-3229

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions wolfssl (affected versions not specified)

Description An integer overflow issue was identified in the wolfssl add to chain function, leading to heap corruption when certificate data exceeded the bounds of the certificate buffer. The function is utilized by the following API endpoints: wolfSSL CTX add extra chain cert, wolfSSL CTX add1 chain cert, and wolfSSL add0 chain cert. This issue is not remotely exploitable and requires a compromise of the application context loading certificates. The issue is triggered when using 3rd party compatibility features: enable-opensslall, enable-opensslextra, enable-lighty, enable-stunnel, enable-nginx, and enable-haproxy.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

CVE-2026-3229

Produtos afetados

Wolfssl

Referências · 9

• https://github.com/wolfSSL/wolfssl/pull/9827 · Correção
• https://security-tracker.debian.org/tracker/CVE-2026-3229 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-3229 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2026-3229 · Nota de Segurança
• https://twitter.com/CVEnew/status/2035627043023413709 · Publicação no Twitter
• https://ubuntu.com/security/CVE-2026-3229 · Aviso do Fabricante
• https://t.me/msrcreports/4073 · Publicação no Telegram
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-3229 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-3229 · Nota de Segurança