Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A 1-byte stack buffer over-read was identified in the MatchDomainName function (src/internal.c) during wildcard hostname validation when the LEFT_MOST_WILDCARD_ONLY flag is active. If a wildcard * exhausts the entire hostname string, the function reads one byte past the buffer without a bounds check, which could cause a crash.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-09 | 1 | Disclosure1 |
| 2026-04-10 | 1 | General1 |
CVE-2026-5772 A 1-byte stack buffer over-read was identified in the MatchDomainName function (src/internal.c) during wildcard hostname validation when the LEFT_MOST_WILDCARD_ONLY fla… https://www.cve.org/CVERecord?id=CVE-2026-5772
Post summary
The post announces CVE‑2026‑5772, detailing a 1‑byte stack buffer over‑read in a hostname validation function, without mentioning PoC, exploitation, or fixes.
CVE-2026-5772 Stack Buffer Over-Read in MatchDomainName Wildcard Hostname Validation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5772
Post summary
The post references CVE‑2026‑5772 and supplies a brief technical description (stack buffer over‑read), but offers no further details such as PoC, exploit code, active exploitation, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wolfssl | wolfssl | - | - | - |