Buffer overflow in Wolfssl
CVE-2026-5187
Two potential heap out-of-bounds write locations existed in DecodeObjectId() in wolfcrypt/src/asn.c. First, a bounds check only validates one available slot before writing two OID arc values (out[0] and out[1]), enabling a 2-byte out-of-bo…
Vulnerability class: Buffer Overflow
EPSS: 0.001 (17.4th percentile) — read the EPSS interpretation.
Affected products
- Wolfssl — versions 0