CVE-2024-0901 SEGV and out of bounds memory read from malicious packet
A remote attacker can cause a crash or read out-of-bounds memory by sending a malformed packet to applications using wolfSSL.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-0901?
CVE-2024-0901 is a high-severity memory corruption vulnerability in Wolfssl Wolfssl, published on 25 Mar 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.
Weakness: CWE-129
Which versions are affected by CVE-2024-0901?
It affects 1 product.
Products include Wolfssl Wolfssl.
How do I fix CVE-2024-0901?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-0901 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-0901 exists.
Other vulnerabilities in Wolfssl Wolfssl
Sources
Also known as AZL-37112, BELL-CVE-2024-0901, DEBIAN-CVE-2024-0901, GHSA-qrv4-68mg-fv43, JLSEC-2026-680, UBUNTU-CVE-2024-0901.