Logo
vulnerabilityCVE-2026-5448
Name
CVE-2026-5448
Source
NVD ( link)Debian ( link)
Description
X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
wolfssl
Exploitable

Vulnerability Ratings#


2.3
CVSSv4
4.3
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
5.9.1
Not Affected
buildroot
master
5.9.1
Not Affected
openwrt
master
5.9.1-r1
Not Affected
openwrt
openwrt-25.12
5.9.1-r1
Not Affected
yocto
master
5.9.1
Not Affected
yocto
scarthgap
5.7.2
Exploitable