Integer Overflow in Certificate Chain Allocation
Summary
Integer Overflow in Certificate Chain Allocation
Original description
The description as published by the source.
An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssl_add_to_chain is called by these API: wolfSSL_CTX_add_extra_chain_cert, wolfSSL_CTX_add1_chain_cert, wolfSSL_add0_chain_cert. These API are enabled for 3rd party compatibility features: enable-opensslall, enable-opensslextra, enable-lighty, enable-stunnel, enable-nginx, enable-haproxy. This issue is not remotely exploitable, and would require that the application context loading certificates is compromised.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-3229 wolfssl
- Ubuntu UBUNTU-CVE-2026-3229 wolfssl
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com