Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Integer underflow in wolfSSL packet sniffer <= 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication tag into traffic inspected by ssl_DecodePacket. The underflow wraps a 16-bit length to a large value that is passed to AEAD decryption routines, causing a large out-of-bounds read and crash. An unauthenticated attacker can trigger this remotely via malformed TLS Application Data records.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-5778 Integer underflow in wolfSSL packet sniffer <= 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the … https://www.cve.org/CVERecord?id=CVE-2026-5778
Post summary
The tweet announces the CVE, giving a brief technical sketch of the integer underflow issue in wolfSSL prior to version 5.9.0.
CVE-2026-5778 Integer Underflow in wolfSSL Packet Sniffer 5.9.0 Causes Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5778
Post summary
The text announces a new integer underflow vulnerability in wolfSSL Packet Sniffer 5.9.0 that can cause denial of service, but does not provide any PoC, exploit, or patch details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wolfssl | wolfssl | - | - | - |