title: SEGV and out of bounds memory read from malicious packet
description: Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.
problem types: CWE-129 Improper Validation of Array Index
affected:
{
defaultStatus: unaffected
product: wolfSSL
repo: https://github.com/wolfSSL/wolfssl
vendor: wolfSSL
versions:
lessThanOrEqual: 5.6.6, status: affected, version: 3.12.2, versionType: release bundle
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Update wolfSSL to 5.7.0 or apply the fix located in:  https://github.com/wolfSSL/wolfssl/pull/7099 .