https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:27:20.050516+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-3849 CVE-2026-3849 — Buffer Overflow in HPKE via Oversized ECH Config 2026-10-06T22:27:20.072398+00:00

Affected: wolfSSL Inc. wolfSSL

Stack Buffer Overflow in wc_HpkeLabeledExtract via Oversized ECH Config. A vulnerability existed in wolfSSL 5.8.4 ECH (Encrypted Client Hello) support, where a maliciously crafted ECH config could cause a stack buffer overflow on the client side, leading to potential remote execution and client program crash. This could be exploited by a malicious TLS server supporting ECH. Note that ECH is off by default, and is only enabled with enable-ech.