CVE-2026-5778: Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.
Integer underflow in wolfSSL packet sniffer <= 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by sslDecodePacket. The underflow wraps a 16-bit length to a large value that is passed to AEAD decryption routines, causing a large out-of-bounds read and crash. An unauthenticated attacker can trigger this remotely via malformed TLS Application Data records.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5778?
CVE-2026-5778 has a medium severity rating due to its potential for causing application crashes.
How do I fix CVE-2026-5778?
To address CVE-2026-5778, upgrade the wolfSSL packet sniffer to version 5.9.1 or later.
What are the potential impacts of CVE-2026-5778?
CVE-2026-5778 can lead to application crashes when exploited, disrupting normal operation.
Who is affected by CVE-2026-5778?
CVE-2026-5778 affects users of wolfSSL packet sniffer versions up to and including 5.9.0.
What kind of vulnerability is CVE-2026-5778?
CVE-2026-5778 is classified as an integer underflow vulnerability that can lead to out-of-bounds access.