wolfSSL DTLS 1.3 Heap Buffer Overflow Vulnerability in ACK Message Processing

Vulnerability

A heap buffer overflow vulnerability has been identified in wolfSSL's handling of DTLS 1.3 ACK messages. This issue allows remote attackers to send crafted ACK messages that trigger the buffer overflow.

Impact

Exploitation of this vulnerability leads to a heap buffer overflow, which can commonly result in arbitrary code execution or memory corruption.

Added: Apr 9, 2026, 10:53 PM
Updated: Apr 9, 2026, 10:53 PM

Vulnerability Rating

Custom Algorithm
spread
6.6
impact
0.6
exploitability
5.3
remediation
7.7
relevance
5.5
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.