CVE-2026-5772
MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
13th
A 1-byte stack buffer over-read was identified in the MatchDomainName function (src/internal.c) during wildcard hostname validation when the LEFT_MOST_WILDCARD_ONLY flag is active. If a wildcard * exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check, which could cause a crash.
| CWE | CWE-126 |
| Vendor | wolfssl |
| Product | wolfssl |
| Published | Apr 9, 2026 |
| Last Updated | Apr 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for wolfssl wolfssl
Be the first to know when new unknown vulnerabilities affecting wolfssl wolfssl are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
wolfSSL / wolfSSL
0 ≤ 5.9.0
Credits
Zou Dikai