Search
Search is not available in local development.
Run npx pagefind --site __site after building to enable it.
JLSEC-2026-724 Low 2.3

X.509 date buffer overflow in `wolfSSL_X509_notAfter` / `wolfSSL_X509_notBefore`

SourceEditHistoryOSVJSON (OSV)
JLSEC Published
Modified
Severity
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green
Affected Packages
wolfSSL_jll < 5.9.2+0
Upstream
CVE-2026-5448 GHSA-5jqq-xpcr-q3r7 EUVD-2026-21233

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

References