wolfSSL Heap-Based Buffer Overflow Vulnerability in SSL Session Deserialization

A heap-buffer-overflow vulnerability has been identified in wolfSSL's function wolfSSL_d2i_SSL_SESSION(). This issue arises when deserializing session data with SESSION_CERTS enabled, as the lengths of certificates and session IDs are read from untrusted input without proper bounds validation. This oversight allows an attacker to overflow fixed-size buffers and corrupt heap memory. The vulnerability can be triggered by loading a maliciously crafted session from an external source, while internal sessions remain unaffected.

Impact

Exploitation of this vulnerability leads to a heap-based buffer overflow, allowing for memory corruption that could potentially be exploited to execute arbitrary code.

Remediation

Users are advised to update to the latest version of wolfSSL, where this vulnerability has been addressed. Instructions for updating can be found in the wolfSSL documentation.