Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Integer underflow in wolfSSL packet sniffer <= 5.8.4 allows an attacker to cause a buffer overflow in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by ssl_DecodePacket. The underflow wraps a 16-bit length to a large value that is passed to AEAD decryption routines, causing heap buffer overflow and a crash. An unauthenticated attacker can trigger this remotely via malformed TLS Application Data records.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-19 | 2 | Disclosure2 |
| 2026-03-23 | 1 | Disclosure1 |
CVE-2026-1005 Integer underflow in wolfSSL packet sniffer <= 5.8.4 allows an attacker to cause a buffer overflow in the AEAD decryption path by injecting a TLS record shorter than th… https://www.cve.org/CVERecord?id=CVE-2026-1005
Post summary
CVE-2026-1005 reports an integer underflow in wolfSSL packet sniffer that can lead to a buffer overflow during AEAD decryption when a TLS record is injected with a shorter length.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-1005 - Integer underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path Intel Report: https://ift.tt/THY13AC
Post summary
The post announces CVE-2026-1005, describing it as an integer underflow that causes out‑of‑bounds access in AES‑based decryption, but does not mention a PoC, exploit code, active exploitation, or patches.
CVE-2026-1005 Integer Underflow in wolfSSL Packet Sniffer <= 5.8.4 Enables Remote Buffer Overflow https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-1005
Post summary
The text announces an integer underflow vulnerability in wolfSSL Packet Sniffer up to version 5.8.4 that can lead to a remote buffer overflow, without mentioning PoCs, exploits, or mitigations.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wolfssl | wolfssl | - | - | - |