CVE-2014-2896: wolfSSL

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors, which trigger memory corruption or an out-of-bounds read.

Affected products

• wolfSSL wolfSSL: from 2.5.0, before 2.9.4 (fixed in 2.9.4)

Published 2020-01-28. Last modified 2026-06-17.