CVE-2026-5448
1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore
Summary
1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore
Original description
The description as published by the source.
X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2026-5448 wolfssl
- Ubuntu UBUNTU-CVE-2026-5448 wolfssl
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com