CyberSecBulletin

wofSSL vulnerabilities

We track 1 vulnerability in wofSSL products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 19, 2026.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest wofSSL vulnerabilities

  • 9.8 Critical severity

    wolfSSL: Heap-based Buffer Overflow

    CVE-2026-3549wofSSL

    Heap Overflow in TLS 1.3 ECH parsing. An integer underflow existed in ECH extension parsing logic when calculating a buffer length, which resulted in writing beyond the bounds of an allocated buffer. Note that in wolfSSL, ECH is off by default, and the ECH sta