Out-of-Bounds Read Vulnerability in wolfSSL Affected by ALPN Parsing

CVE-2026-3547

What is CVE-2026-3547?

A significant security vulnerability exists in wolfSSL due to an out-of-bounds read in ALPN parsing, which arises from inadequate validation. When built with ALPN enabled, wolfSSL versions 5.8.4 and earlier are particularly vulnerable. This flaw can be exploited via a carefully crafted ALPN protocol list, leading to a potential denial of service by causing a process crash. Although ALPN is disabled by default, its activation for third-party compatibility features increases the risk of exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References