CVE-2026-5264 HIGH

CVE-2026-5264: DTLS 1.3 ACK heap buffer overflow

Vendor Wolfssl
Product wolfSSL
Weakness CWE-122
Published April 9, 2026
Last update April 10, 2026
View on NVD All CVEs

CVSS base score

8.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overflow.

Key dates

02Disclosure timeline

April 9, 2026 CVE published
April 10, 2026 Record updated