CVE catalog

CVE-2026-7532

iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constraints are not enforced in that configuration, allowing a certificate to bypass an issuing CA's IP addre

[CVE catalog]

Severity
Medium · CVSS 5.7
Published
Source
[NVD] · [CVE record]
EPSS
0.29% · Oct 25, 2026

iPAddress name constraints bypass when WOLFSSL_IP_ALT_NAME is not defined. IP address name constraints are not enforced in that configuration, allowing a certificate to bypass an issuing CA's IP address constraints.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianwolfsslsid5.9.2-1.2fixed
Debianwolfssltrixie5.7.2-0.1+deb13u2vulnerable
Debianwolfsslbookworm5.5.4-2+deb12u2vulnerable
Debianwolfsslbookworm-security5.5.4-2+deb12u3vulnerable
CpewolfsslNot reportedNot reportedvulnerable
CpewolfsslNot reported5.9.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianwolfsslsourcesid5.9.2-1not yet assignedNot reported[1140815]
Debianwolfsslsourcetrixie(unfixed)not yet assignedNot reported[1140815]
Debianwolfsslsourcebookworm(unfixed)end-of-lifeNot reported[1140815]
CpewolfsslcpeNot reported5.9.2Not reportedNot reportedNot reported

[Debian bug #1140815]

Notes

[trixie] wolfssl: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libwolfssl35]Affected

    Source package: [wolfssl]

    Details (4)

    • 5.5.4-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

  • [libwolfssl-dev]Affected

    Source package: [wolfssl]

    Details (4)

    • 5.5.4-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

[Debian 13 (Trixie)]

  • [libwolfssl42t64]Affected

    Source package: [wolfssl]

    Details (2)

    • 5.7.2-0.1+deb13u1 · amd64 · trixie

      Affected

      nvd · wolfssl · debian · 13

    • 5.7.2-0.1+deb13u1 · arm64 · trixie

      Affected

      nvd · wolfssl · debian · 13

  • [libwolfssl-dev]Affected

    Source package: [wolfssl]

    Details (2)

    • 5.7.2-0.1+deb13u1 · amd64 · trixie

      Affected

      nvd · wolfssl · debian · 13

    • 5.7.2-0.1+deb13u1 · arm64 · trixie

      Affected

      nvd · wolfssl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]