CVE-2026-5448 | wolfSSL up to 5.9.0 Compatibility Layer API wolfSSL_X509_notAfter/wolfSSL_X509_notBefore Date heap-based overflow

A vulnerability marked as critical has been reported in wolfSSL up to 5.9.0. The impacted element is the function wolfSSL_X509_notAfter/wolfSSL_X509_notBefore of the component Compatibility Layer API. The manipulation of the argument Date leads to heap-based buffer overflow.

This vulnerability is traded as CVE-2026-5448. Access to the local network is required for this attack to succeed. There is no exploit available.

It is suggested to upgrade the affected component.