Buffer Overflow Vulnerabilities in wolfSSL CRL Parser by wolfSSL

CVE-2026-3548

What is CVE-2026-3548?

Two buffer overflow vulnerabilities were identified in the wolfSSL CRL parser, specifically related to CRL number parsing. A heap-based overflow can occur when a CRL number is improperly stored as a hexadecimal string, leading to potential out-of-bounds memory access. Additionally, a stack-based overflow may arise for certain large CRL numbers. These vulnerabilities are triggered when loading CRL files from untrusted sources, and they only affect builds where CRL support is enabled.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References