CVE Explorer

CVE-2026-5188

An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name (SAN) extension of X.509 certificates. A malformed certificate can specify an entry length larger than the enclosing sequence, causing the internal length counter to wrap during parsing. This results in incorrect handling of certificate data. The issue is limited to configurations using the original ASN.1 parsing implementation which is off by default.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:4626b5c5f0a02da4bf93695427a140ab9c48f86449983a49db807507c5400e8e

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"defaultStatus":"unaffected","product":"wolfSSL","programFiles":["wolfcrypt/src/asn.c"],"repo":"https://github.com/wolfSSL/wolfssl","vendor":"wolfSSL","versions":[{"lessThanOrEqual":"5.9.0","status":"affected","version":"0","versionType":"semver"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6d8079580eea9e75ba4a7343f3ca7ab3c38d5ac3c145a379142af720cfa5fd20 · sha256:58c0e8a880a40c13… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"PRESENT","attackVector":"NETWORK","baseScore":2.3,"baseSeverity":"LOW","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"PASSIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpa…

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:6d8079580eea9e75ba4a7343f3ca7ab3c38d5ac3c145a379142af720cfa5fd20 · sha256:58c0e8a880a40c13… · /containers/cna/metrics/0/cvssV4_0

CWE assertions

1 source assertion

{"cweId":"CWE-191","description":"CWE-191 Integer underflow","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:6d8079580eea9e75ba4a7343f3ca7ab3c38d5ac3c145a379142af720cfa5fd20 · sha256:58c0e8a880a40c13… · /containers/cna/problemTypes/0/descriptions/0

Source references

1 source assertion

{"url":"https://github.com/wolfSSL/wolfssl/pull/10024"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6d8079580eea9e75ba4a7343f3ca7ab3c38d5ac3c145a379142af720cfa5fd20 · sha256:58c0e8a880a40c13… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer