wolfSSL CertFromX509 AuthorityKeyIdentifier Heap Buffer Overflow Vulnerability

A heap buffer overflow vulnerability has been identified in wolfSSL's CertFromX509 function, specifically related to the handling of the AuthorityKeyIdentifier extension in X.509 certificates. This vulnerability arises from incorrect size management of the AuthorityKeyIdentifier, leading to the potential for memory corruption.

Impact

Exploitation of this vulnerability leads to a heap buffer overflow, which can commonly result in memory corruption and potentially allow for arbitrary code execution.

Remediation

Users are advised to update to the latest version of wolfSSL where this vulnerability has been addressed.