CVE-2026-12340
highpriority · track · 30EPSS 0.003 · 22 %ileEUUSEPSS · scored 2026-10-27
Out-of-bounds heap read during SM2/SM3 certificate signature verification. When parsing a certificate with an SM3wSM2 signature, the Subject Key Identifier computation reads the trailing 65 bytes of the public key without checking that the key is at least that long. A public key shorter than 65 bytes results in an out-of-bounds heap read, leading to a potential crash (denial of service); there is no out-of-bounds write. Note this only affects builds with SM2 support (--enable-sm2 or --enable-all).
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–high · 1.7–7.5
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- https://github.com/wolfSSL/wolfssl/pull/10641cnnvd
- https://www.wolfssl.com/docs/security-vulnerabilities/cnnvd
- https://www.wolfssl.com/download/Patchcnnvd
- https://github.com/wolfSSL/wolfssl/pull/10641enisa_euvd
- https://www.wolfssl.com/docs/security-vulnerabilities/enisa_euvd
- https://github.com/wolfSSL/wolfssl/pull/10641Issue TrackingPatchnvd
- https://www.wolfssl.com/docs/security-vulnerabilities/Vendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan