Out-of-bounds Read in Wolfssl
CVE-2026-12340
Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of the public key without checking that the…
Vulnerability class: Buffer Overflow
Affected products
- Wolfssl — versions 5.6.4