wolfSSL Stack Buffer Over-Read Vulnerability in MatchDomainName Function During Wildcard Hostname Validation

A stack buffer over-read vulnerability has been identified in the wolfSSL library, specifically in the MatchDomainName function within src/internal.c. This issue arises during wildcard hostname validation when the LEFT_MOST_WILDCARD_ONLY flag is active. The vulnerability occurs because if a wildcard character exhausts the entire hostname string, the function reads one byte beyond the buffer's limit without proper bounds checking, potentially leading to a crash.

Impact

Exploitation of this vulnerability can cause a crash, likely due to a buffer over-read that disrupts normal program execution.