Skip to main content
VulnerabilityPublished Updated

Wolfssl: Heap-buffer-overflow

Affects wolfsslSource GCVE Database

0
Severity
Medium

Rated Medium by Threat Radar's AI analysis

Data as of 10 Nov 2026, 15:20 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzwolfsslpkg:generic/wolfsslOther threatsAffected
  • rust/wolfssl-wolfcrypt/v1.0.0 – wolfEntropyv7.0.0-CHKIN
  • >=b32036258d8efa6617b916f0c4be11a33e699b37
29 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, users should consider avoiding processing untrusted OCSP responses or applying any vendor-recommended mitigations once published.

Description

A heap-buffer-overflow vulnerability exists in the DecodeBasicOcspResponse function of wolfSSL, as reported by OSS-Fuzz. This issue involves an out-of-bounds read during the decoding of OCSP responses.

References

Community reviews

Loading reviews…