AIKIDO-2026-10436
wolfSSL.wolfssl is vulnerable to Buffer overflow (heap based)
83
High Risk
This Affects:
wolfSSL.wolfsslTL;DR
TLS 1.3 Encrypted Client Hello parsing can integer-underflow when deriving a buffer length, causing a heap write past the end of an allocated buffer when ECH is enabled. A peer can supply malformed ECH extensions that trigger the underflow. The fix corrects length calculation so ECH parsing cannot write beyond the allocated region.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
wolfSSL.wolfssl is vulnerable to Buffer overflow (heap based) in versions 0.0.1 - 5.8.4.
How to fix this
Upgrade the wolfSSL.wolfssl library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant