An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssl_add_to_chain is called by these API: wolfSSL_CTX_add_extra_chain_cert, wolfSSL_CTX_add1_chain_cert, wolfSSL_add0_chain_cert. These API are enabled for 3rd party compatibility features: enable-opensslall, enable-opensslextra, enable-lighty, enable-stunnel, enable-nginx, enable-haproxy. This issue is not remotely exploitable, and would require that the application context loading certificates is compromised.
References
| Link | Resource |
|---|---|
| https://github.com/wolfSSL/wolfssl/pull/9827 | Patch Issue Tracking |
Configurations
History
26 Mar 2026, 20:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/wolfSSL/wolfssl/pull/9827 - Patch, Issue Tracking | |
| CPE | cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| Summary |
|
|
| First Time |
Wolfssl
Wolfssl wolfssl |
19 Mar 2026, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-03-19 21:17
Updated : 2026-03-26 20:57
NVD link : CVE-2026-3229
Mitre link : CVE-2026-3229
CVE.ORG link : CVE-2026-3229
JSON object : View
Products Affected
wolfssl
- wolfssl
CWE
CWE-122
Heap-based Buffer Overflow