What’s Vulnerable › Vulnerabilities

CVE-2024-0901: SEGV and out of bounds memory read from malicious packet

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-03-25 · updated 2026-06-17
• Weakness: CWE-129

Description

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.

Affected products

• wolfSSL: from 3.12.2 through 5.6.6

References

• https://github.com/wolfSSL/wolfssl/issues/7089
• https://github.com/wolfSSL/wolfssl/pull/7099
• https://github.com/wolfSSL/wolfssl/issues/7089
• https://github.com/wolfSSL/wolfssl/pull/7099

Get alerted when CVE-2024-0901 or the next vulnerability affects your stack