VDB
CVE-2026-5188
CVE-2026-5188
PUBLISHED
CVSS 2.3 LOW
Reported by wolfSSL · Published April 10, 2026
An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name (SAN) extension of X.509 certificates. A malformed certificate can specify an entry length larger than the enclosing sequence, causing the internal length counter to wrap during parsing. This results in incorrect handling of certificate data. The issue is limited to configurations using the original ASN.1 parsing implementation which is off by default.
EPSS 0.04% · 11.3th percentile
Risk Scores
CVSS v4.0
2.3
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS Score
0.04%
11.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfSSL | wolfSSL | 0 |
| wolfSSL | wolfSSL | 0 |
Timeline
- Apr 10, 2026 EPSS Score
- Apr 10, 2026 CVE Published
- Apr 10, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score