CVE-2026-5448 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore

Low 2.3 Published 9 Apr 2026 Updated 10 Apr 2026

A buffer overflow in wolfSSL's X.509 date parsing APIs allows attackers to execute code or cause denial of service via crafted certificates.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2026-5448?

CVE-2026-5448 is a low-severity memory corruption vulnerability in Wolfssl Wolfssl, published on 9 Apr 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore. A buffer overflow may occur when parsing date fields from a crafted X.509 certificate via the compatibility layer API. This is only triggered when calling these two APIs directly from an application, and does not affect TLS or certificate verify operations in wolfSSL.

Weakness: CWE-122

Which versions are affected by CVE-2026-5448?

It affects 1 product.

Products include Wolfssl Wolfssl.

How do I fix CVE-2026-5448?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2026-5448 being exploited?

There is no known exploitation of CVE-2026-5448 in the wild and no public exploit code.

All Wolfssl Wolfssl vulnerabilities

Sources

Also known as DEBIAN-CVE-2026-5448, GHSA-5jqq-xpcr-q3r7, JLSEC-2026-724, UBUNTU-CVE-2026-5448.