PT-2026-26322 · Wolfssl · Wolfssl

Haruto Kimura · Published 2026-03-19 · Updated 2026-03-19 · CVE-2026-2646

NVD

CVSS v4.0

5.0

Medium

AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSL d2i SSL SESSION() function. When deserializing session data with SESSION CERTS enabled, certificate and session id lengths are read from an untrusted input without bounds validation, allowing an attacker to overflow fixed-size buffers and corrupt heap memory. A maliciously crafted session would need to be loaded from an external source to trigger this vulnerability. Internal sessions were not vulnerable.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-2646

Affected Products

Wolfssl

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-2646 · Security Note
• https://github.com/wolfSSL/wolfssl/pull/9949 · Note
• https://github.com/wolfSSL/wolfssl/pull/9748 · Note