CVE-2026-5778
Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.
Résumé
Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Integer underflow in wolfSSL packet sniffer <= 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by ssl_DecodePacket. The underflow wraps a 16-bit length to a large value that is passed to AEAD decryption routines, causing a large out-of-bounds read and crash. An unauthenticated attacker can trigger this remotely via malformed TLS Application Data records.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2026-5778 wolfssl
- Ubuntu UBUNTU-CVE-2026-5778 wolfssl
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com