CVE catalog

CVE-2026-3229

An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificat

[CVE catalog]

Severity
Low · CVSS 1.2
Published
Source
[NVD] · [CVE record]
EPSS
0.07% · Oct 25, 2026

An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssl_add_to_chain is called by these API: wolfSSL_CTX_add_extra_chain_cert, wolfSSL_CTX_add1_chain_cert, wolfSSL_add0_chain_cert. These API are enabled for 3rd party compatibility features: enable-opensslall, enable-opensslextra, enable-lighty, enable-stunnel, enable-nginx, enable-haproxy. This issue is not remotely exploitable, and would require that the application context loading certificates is compromised.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianwolfsslsid5.9.2-1.2fixed
Debianwolfssltrixie5.7.2-0.1+deb13u2vulnerable
Debianwolfsslbookworm5.5.4-2+deb12u2vulnerable
Debianwolfsslbookworm-security5.5.4-2+deb12u3vulnerable
CpewolfsslNot reportedNot reportedvulnerable
Ubuntuwolfssl16.043.4.8+dfsg-1vulnerable
Ubuntuwolfssl18.043.10.2+dfsg-2vulnerable
Ubuntuwolfssl18.043.12.0+dfsg-1vulnerable
Ubuntuwolfssl18.043.12.2+dfsg-1vulnerable
Ubuntuwolfssl18.043.13.0+dfsg-1vulnerable
Ubuntuwolfssl20.044.1.0+dfsg-2vulnerable
Ubuntuwolfssl20.044.2.0+dfsg-1vulnerable
Ubuntuwolfssl20.044.2.0+dfsg-2vulnerable
Ubuntuwolfssl20.044.2.0+dfsg-3vulnerable
Ubuntuwolfssl20.044.3.0+dfsg-2vulnerable
Ubuntuwolfssl22.044.6.0-3vulnerable
Ubuntuwolfssl22.045.0.0-1vulnerable
Ubuntuwolfssl22.045.1.1-1vulnerable
Ubuntuwolfssl22.045.2.0-1vulnerable
Ubuntuwolfssl22.045.2.0-2vulnerable
Ubuntuwolfssl24.045.5.4-2vulnerable
Ubuntuwolfssl24.045.5.4-2.1vulnerable
Ubuntuwolfssl24.045.6.4-2vulnerable
Ubuntuwolfssl24.045.6.6-1.2vulnerable
Ubuntuwolfssl24.045.6.6-1.3vulnerable
Ubuntuwolfssl24.045.6.6-1.3build1vulnerable
Ubuntuwolfssl25.105.7.2-0.1vulnerable
Ubuntuwolfssl26.045.7.2-0.1vulnerable
Ubuntuwolfssl26.045.8.2-1.2vulnerable
Ubuntuwolfssl26.045.8.4-1vulnerable
Ubuntuwolfssl26.045.9.1-0.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianwolfsslsourcesid5.9.0-0.1not yet assignedNot reportedNot reported
Debianwolfsslsourcetrixie(unfixed)not yet assignedNot reportedNot reported
Debianwolfsslsourcebookworm(unfixed)not yet assignedNot reportedNot reported

Notes

[trixie] wolfssl: Minor issue [bookworm] wolfssl: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libwolfssl35]Affected

    Source package: [wolfssl]

    Details (4)

    • 5.5.4-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

  • [libwolfssl-dev]Affected

    Source package: [wolfssl]

    Details (4)

    • 5.5.4-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

[Debian 13 (Trixie)]

  • [libwolfssl42t64]Affected

    Source package: [wolfssl]

    Details (2)

    • 5.7.2-0.1+deb13u1 · amd64 · trixie

      Affected

      nvd · wolfssl · debian · 13

    • 5.7.2-0.1+deb13u1 · arm64 · trixie

      Affected

      nvd · wolfssl · debian · 13

  • [libwolfssl-dev]Affected

    Source package: [wolfssl]

    Details (2)

    • 5.7.2-0.1+deb13u1 · amd64 · trixie

      Affected

      nvd · wolfssl · debian · 13

    • 5.7.2-0.1+deb13u1 · arm64 · trixie

      Affected

      nvd · wolfssl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]