CVE Database
/

CVE-2026-3549

Back to search

CVE-2026-3549

Published: Mar 19, 2026

Modified: Mar 24, 2026

PUBLISHED

Description

Heap Overflow in TLS 1.3 ECH parsing. An integer underflow existed in ECH extension parsing logic when calculating a buffer length, which resulted in writing beyond the bounds of an allocated buffer. Note that in wolfSSL, ECH is off by default, and the ECH standard is still evolving.

VendorProductVersions

wofSSL

wolfSSL

affected
0 - < 5.9.0

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now