Critical severity9.8NVD Advisory· Published Mar 19, 2026· Updated Jun 17, 2026
CVE-2026-3549
CVE-2026-3549
Description
Heap Overflow in TLS 1.3 ECH parsing. An integer underflow existed in ECH extension parsing logic when calculating a buffer length, which resulted in writing beyond the bounds of an allocated buffer. Note that in wolfSSL, ECH is off by default, and the ECH standard is still evolving.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- wofSSL/wolfSSLv5Range: 0
Patches
Vulnerability mechanics
References
1- github.com/wolfSSL/wolfssl/pull/9817nvdIssue TrackingPatch
News mentions
0No linked articles in our index yet.