EUVD-2026-21240

A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography PQC hybrid KeyShare processing. In the error handling path of TLSXKeyShareProcessPqcHybridClient in src/tls.c, the inner function TLSXKeyShareProcessPqcClientex frees a KyberKey object upon encountering an error. The call...

CVE-2026-5460

A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography PQC hybrid KeyShare processing. In the error handling path of TLSXKeyShareProcessPqcHybridClient in src/tls.c, the inner function TLSXKeyShareProcessPqcClientex frees a KyberKey object upon encountering an error. The call...

OSV-2022-1113 Heap-buffer-overflow in ForceZero

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52822 Crash type: Heap-buffer-overflow WRITE 8 Crash state: ForceZero BuildMessage SendFinished...