A stack read overflow vulnerability exists in Apache Qpid Proton C versions through 0.40.0 due to a misconfigured wildcard TLS certificate. The flaw does not affect wildcard certificates compliant with the RFC9525 standard. The issue is resolved in version 0.41.1, which restricts accepted certificates to those compliant with RFC9525.