Stack Read Overflow in Apache Qpid Proton C Due to Misconfigured Wildcard TLS Certificate

CVE-2026-115942

What is CVE-2026-115942?

A misconfigured wildcard TLS certificate in Apache Qpid Proton C can lead to a stack read overflow, potentially allowing an attacker to exploit this condition. This issue specifically affects versions up to 0.40.0 and necessitates compliance with the RFC9525 standard. Users are strongly advised to upgrade to version 0.41.1, which resolves this vulnerability by ensuring that only properly configured TLS certificates are accepted, thereby enhancing security.

References