CVE-2019-16748: wolfSSL

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking. Specifically, there is a one-byte heap-based buffer over-read in CheckCertSignature_ex in wolfcrypt/src/asn.c.

Affected products

• wolfSSL wolfSSL: up to and including 4.1.0

Published 2019-09-24. Last modified 2026-06-17.