critical9.1
CVE-2026-5393
Dual-Algorithm CertificateVerify out-of-bounds read.
Impact
Dual-Algorithm CertificateVerify out-of-bounds read. When processing a dual-algorithm CertificateVerify message, an out-of-bounds read can occur on crafted input. This can only occur when --enable-experimental and --enable-dual-alg-certs is used when building wolfSSL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wolfssl | Wolfssl | before 5.9.1 |