Buffer Over-read Vulnerability in wolfSSL Product

CVE-2026-5772

What is CVE-2026-5772?

A vulnerability has been identified in the MatchDomainName function within wolfSSL during wildcard hostname validation. This issue arises when the LEFT_MOST_WILDCARD_ONLY flag is active. It occurs if a wildcard '*' completely encompasses the hostname string, resulting in the function reading beyond the buffer limit by one byte due to the absence of a proper bounds check, potentially leading to a crash.

References