Length Confusion Vulnerability in wolfSSL OCSP Response Processing
CVE-2026-10098

6.3MEDIUM

Key Information:

Vendor

Wolfssl

Status
Wolfssl
Vendor
CVE Published:
25 June 2026

What is CVE-2026-10098?

A vulnerability in wolfSSL's OCSP response processing allows incorrect reporting of certificate revocation status due to a flaw in how serial numbers are compared. Specifically, a SingleResponse for one certificate can be incorrectly matched to another certificate if the serial number is a prefix of the target serial number, potentially leading to trust issues in certificate validation. The resolution requires strict length checks before comparing serial number bytes, ensuring only series of equal length are considered for status lookup.

Affected Version(s)

wolfSSL 4.6.0 <= 5.9.1

References

https://github.com/wolfSSL/wolfssl/pull/10554
patch
https://www.wolfssl.com/docs/security-vulnerabilities/

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kim Youngjoon (Team-Atlanta and Georgia Institute of Technology)
.