Heap-based Buffer Overflow Vulnerability in wolfSSL's ECC Code

CVE-2026-4395

What is CVE-2026-4395?

A heap-based buffer overflow has been identified in the ECC code path of wolfSSL's wolfcrypt library. This vulnerability can be exploited by a remote attacker to manipulate the pubkey_raw buffer by sending a crafted oversized EC public key point during a TLS key exchange process. Specifically, the vulnerability arises within the wc_ecc_import_x963_ex() function, which uses XMEMCPY to copy data into the pubkey_raw buffer without proper bounds checking, in contrast to the ATECC code path that implements length validation. This flaw presents a serious risk during communications, enabling attackers to compromise the integrity of security mechanisms.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References