CVE-2019-15651: wolfSSL

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASN_BOOLEAN byte is mishandled for a crafted DER certificate in GetLength_ex.

Affected products

• wolfSSL wolfSSL: version 4.1.0 only

Published 2019-08-26. Last modified 2026-06-17.