CVE-2026-5264
DTLS 1.3 ACK heap buffer overflow
Summary
DTLS 1.3 ACK heap buffer overflow
Original description
The description as published by the source.
Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overflow.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-5264 wolfssl
- Ubuntu UBUNTU-CVE-2026-5264 wolfssl
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com