PT-2026-64461

In wolfSSL before 5.5.2, if callback functions are enabled via the WOLFSSL CALLBACKS flag, then a malicious TLS 1.3 client or network attacker can trigger a buffer over-read on the heap of 5 bytes. WOLFSSL CALLBACKS is only intended for debugging...

Heap-buffer over-read with WOLFSSL_CALLBACKS

...