CVE-2024-0901: wolfSSL

Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.

Affected products

• wolfSSL wolfSSL: from 3.12.2, up to and including 5.6.6

Published 2024-03-25. Last modified 2026-06-17.