CVE-2026-4395

The CVE-2026-4395 entry describes a heap-based buffer overflow in wolfSSL wolfcrypt in the KCAPI ECC path, specifically wc_ecc_import_x963_ex(). The vulnerability arises because the WOLFSSL_KCAPI_ECC code copies input into key->pubkey_raw (132 bytes) using XMEMCPY without a bounds check, unlik...