CVE-2026-5393 MEDIUM

CVE-2026-5393: OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS

Vendor Wolfssl
Product wolfSSL
Weakness CWE-125
Published April 9, 2026
Last update April 10, 2026
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Dual-Algorithm CertificateVerify out-of-bounds read. When processing a dual-algorithm CertificateVerify message, an out-of-bounds read can occur on crafted input. This can only occur when --enable-experimental and --enable-dual-alg-certs is used when building wolfSSL.

Key dates

02Disclosure timeline

April 9, 2026 CVE published
April 10, 2026 Record updated