Nixpkgs security tracker

Untriaged

Permalink CVE-2026-5264

created 1 month ago Activity log

Created suggestion 1 month ago

DTLS 1.3 ACK heap buffer overflow

Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overflow.

References

https://github.com/wolfssl/wolfssl/pull/10076

Affected products

wolfSSL

<5.9.1

Matching in nixpkgs

pkgs.wolfssl

Small, fast, portable implementation of TLS/SSL for embedded devices

nixos-unstable 5.9.0
- nixpkgs-unstable 5.9.0
- nixos-unstable-small 5.9.0
nixos-25.11 5.9.0
- nixos-25.11-small 5.9.0
- nixpkgs-25.11-darwin 5.9.0

Package maintainers

@vifino Adrian Pistol <vifino@tty.sh>
@fabaff Fabian Affolter <mail@fabian-affolter.ch>

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.wolfssl

Package maintainers