Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-5264

No fix known EPSS <1%CVSS 8.3

Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overflow.

Published 2026-04-09 · CVE record · OSV

Products: wolfssl

Distro releases

ReleasePackageFixed in
Debian 12wolfsslno fix
Debian 13wolfsslno fix
Ubuntu 16.04 LTSwolfsslno fix
Ubuntu 18.04 LTSwolfsslno fix
Ubuntu 20.04 LTSwolfsslno fix
Ubuntu 22.04 LTSwolfsslno fix
Ubuntu 24.04 LTSwolfsslno fix
Ubuntu 25.10wolfsslno fix
Ubuntu 26.04 LTSwolfsslno fix
Ubuntu 26.10wolfsslno fix