Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-5448

Опубликовано: 10 апр. 2026
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*
Версия до 5.9.1 (исключая)

EPSS

Процентиль: 2%
0.00122
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-122

Связанные уязвимости

CVSS3: 4.3
ubuntu
4 месяца назад

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

msrc
4 месяца назад

1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore

CVSS3: 4.3
debian
4 месяца назад

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_not ...

CVSS3: 4.3
github
4 месяца назад

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

EPSS

Процентиль: 2%
0.00122
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-122