wolfSSL Dual-Algorithm CertificateVerify Out-of-Bounds Read Vulnerability

An out-of-bounds read vulnerability has been identified in wolfSSL when processing dual-algorithm CertificateVerify messages. This issue arises from crafted input and can only be exploited if wolfSSL is built with the --enable-experimental and --enable-dual-alg-certs options.

Impact

Exploitation of this vulnerability leads to an out-of-bounds read, which can potentially be used to read sensitive data or cause a denial-of-service condition.