Summary
ECH server-name handling writes beyond allocated memory. This critical-severity finding affects wolfSSL.
Disclosure timeline
- Public disclosure
Credits
Cantina · Agent-discovered and human-verified
Vulnerability disclosure
ECH server-name handling writes beyond allocated memory
CVE-2026-5503
- Affected product
- wolfSSL
- Severity
- Critical · CVSS 9.1
- Weakness
- CWE-787
- Disclosed