PT-2026-26313 · Wolfssl · Wolfssl

Prasanth Sundararajan · Published 2026-03-19 · Updated 2026-03-23 · CVE-2026-1005

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions wolfSSL versions prior to 5.8.4

Description An integer underflow in the packet sniffer component of wolfSSL allows an attacker to cause a buffer overflow in the AEAD decryption path. This occurs when a TLS record shorter than the expected length is injected into traffic inspected by ssl DecodePacket. The underflow results in a large value being passed to AEAD decryption routines, leading to a heap buffer overflow and a crash. An unauthenticated attacker can trigger this remotely via malformed TLS Application Data records. The vulnerable component is the AEAD decryption path, specifically during the processing of TLS records. The vulnerable function is ssl DecodePacket. The IV (Initialization Vector) and authentication tag are involved in the length calculation that is susceptible to the underflow.

Recommendations wolfSSL versions prior to 5.8.4 should be updated.

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2026-1005

Affected Products

Wolfssl

References · 10

• https://github.com/wolfSSL/wolfssl/pull/9571 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-1005 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-1005 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-1005 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-1005 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-1005 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-1005 · Security Note
• https://twitter.com/cyberbivash/status/2034703245109551363 · Twitter Post
• https://twitter.com/CVEnew/status/2036024196321640646 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2034698218273927379 · Twitter Post