CVE-2014-2898: wolfSSL

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds read when an error occurs, related to not checking the return code and MAC verification failure.

Affected products

• wolfSSL wolfSSL: before 2.9.0 (fixed in 2.9.0)

Published 2020-01-28. Last modified 2026-06-17.