CVE-2026-3849 | wolfSSL up to 5.8.4 ECH wc_HpkeLabeledExtract out-of-bounds write

A vulnerability, which was classified as critical, has been found in wolfSSL up to 5.8.4. This affects the function wc_HpkeLabeledExtract of the component ECH Handler. This manipulation causes out-of-bounds write.

This vulnerability appears as CVE-2026-3849. The attack may be initiated remotely. There is no available exploit.

It is suggested to install a patch to address this issue.