Buffer overflow in Wolfssl
CVE-2026-5503
In TLSX_EchChangeSNI, the ctx->extensions branch set extensions unconditionally even when TLSX_Find returned NULL. This caused TLSX_UseSNI to attach the attacker-controlled publicName to the shared WOLFSSL_CTX when no inner SNI was configu…
Vulnerability class: Buffer Overflow
EPSS: 0.001 (17.0th percentile) — read the EPSS interpretation.
Affected products
- Wolfssl — versions 0