CVE-2026-5393
OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
9th
Dual-Algorithm CertificateVerify out-of-bounds read. When processing a dual-algorithm CertificateVerify message, an out-of-bounds read can occur on crafted input. This can only occur when --enable-experimental and --enable-dual-alg-certs is used when building wolfSSL.
| CWE | CWE-125 |
| Vendor | wolfssl |
| Product | wolfssl |
| Published | Apr 9, 2026 |
| Last Updated | Apr 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for wolfssl wolfssl
Be the first to know when new unknown vulnerabilities affecting wolfssl wolfssl are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
wolfSSL / wolfSSL
0 < 5.9.1
Credits
Sunwoo Lee, (Korea Institute of Energy Technology, KENTECH) for testing Woohyun Choi, (Korea Institute of Energy Technology, KENTECH) for testing Seunghyun Yoon, (Korea Institute of Energy Technology, KENTECH) for testing