CVE-2026-5507: Session Cache Restore — Arbitrary Free via Deserialized Pointer
When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation. An attacker who can poison the session cache could trigger an arbitrary free. Exploitation requires the ability to inject a crafted session into the cache and for the application to call specific session restore APIs.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5507?
The severity of CVE-2026-5507 is rated as medium with a score of 4.1.
What vulnerability does CVE-2026-5507 describe?
CVE-2026-5507 describes an arbitrary free vulnerability that occurs during session cache restoration via deserialized pointers.
How do I fix CVE-2026-5507?
You can fix CVE-2026-5507 by applying the available patch provided by wolfSSL.
What software is affected by CVE-2026-5507?
CVE-2026-5507 affects the wolfSSL library.
What are the prerequisites needed for exploiting CVE-2026-5507?
An attacker must be able to inject a crafted session into the cache to exploit CVE-2026-5507.