CVE-2026-6325

Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the destination buffer.

Score

CVSS 3.1 7.5 High

Status

Analyzed - facts@wolfssl.com

Published

2026-06-25

Last modified

2026-06-26

Weaknesses

CWE-787

Affected products

• Wolfssl (Wolfssl)

References

• https://github.com/wolfSSL/wolfssl/pull/10204
• https://www.wolfssl.com/docs/security-vulnerabilities/