CVE-2026-5447

Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion. A heap buffer overflow occurs when converting an X.509 certificate internally due to incorrect size handling of the AuthorityKeyIdentifier extension.

Score

CVSS 3.1 7.5 High

Status

Analyzed - facts@wolfssl.com

Published

2026-04-09

Last modified

2026-04-10

Weaknesses

CWE-122

Affected products

• Wolfssl (Wolfssl)

References

• https://github.com/wolfSSL/wolfssl/pull/10112