CVE-2026-3549Disclosure(wolfssl / wolfssl)

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap Overflow in TLS 1.3 ECH parsing. An integer underflow existed in ECH extension parsing logic when calculating a buffer length, which resulted in writing beyond the bounds of an allocated buffer. Note that in wolfSSL, ECH is off by default, and the ECH standard is still evolving.

wolfssl CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/wolfSSL/wolfssl/pull/9817

Weakness type (CWE)

CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

wolfssl

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked at 2 mentions on most recent observed day (2026-03-23)
3 total mentions across 2 days

Affected systems

Vendors

wolfssl

Products

wolfssl

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-19	1	Disclosure1
2026-03-23	2	Disclosure2

Full discourse3 posts

Infoflowcloud@infoflowcloud199d
Disclosure
🚨*CVE* CVE-2026-3549 Heap Overflow in TLS 1.3 ECH parsing. An integer underflow existed in ECH extension parsing logic when calculating a buffer length, which resulted in writing beyond the… https://www.cve.org/CVERecord?id=CVE-2026-3549 ----- Traducción: CVE-2026-3549 Des… http://infoflow.cloud`
Post summary
A heap‑overflow vulnerability (CVE‑2026‑3549) was disclosed in TLS 1.3 ECH parsing due to an integer underflow that can cause out‑of‑bounds writes, but no PoC, exploit, patch, or active exploitation details are provided.
0000018
61 followersView on X
CVE@CVEnew199d
Disclosure
CVE-2026-3549 Heap Overflow in TLS 1.3 ECH parsing. An integer underflow existed in ECH extension parsing logic when calculating a buffer length, which resulted in writing beyond the… https://www.cve.org/CVERecord?id=CVE-2026-3549
Post summary
The snippet details the CVE-2026-3549 heap overflow in TLS 1.3 ECH parsing, describing an integer underflow that results in a buffer overflow, without mentioning any PoC, active exploitation, or patch.
00000215
56.8K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds203d
Disclosure
CVE-2026-3549 Heap Overflow in wolfSSL TLS 1.3 ECH Extension Parsing Logic https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3549
Post summary
The text announces a heap overflow vulnerability (CVE‑2026‑3549) in wolfSSL’s TLS 1.3 ECH extension parsing logic.
0000038
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	wolfssl	wolfssl	-	-	-

Explore more

Back to dashboard wolfssl CVEs wolfssl vulnerabilities