Buffer overflow in Wolfssl

CVE-2026-4395

Heap-based buffer overflow in the KCAPI ECC code path of wc_ecc_import_x963_ex() in wolfSSL wolfcrypt allows a remote attacker to write attacker-controlled data past the bounds of the pubkey_raw buffer via a crafted oversized EC public key…

Vulnerability class: Buffer Overflow

EPSS: 0.001 (34.4th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References