CVE-2026-5447

CVE-2026-5447 is a heap buffer overflow vulnerability in the CertFromX509 function that results from improper size handling of the AuthorityKeyIdentifier extension during X.509 certificate conversion. The specific products affected are not detailed in the provided data, but the vulnerability appears to impact certificate processing functionality across one or more applications. The vulnerability presents a moderate risk with a FAUCET Risk Score of 35.0/100. While specific CVSS metrics are unavailable, the heap buffer overflow nature of this defect could potentially allow memory corruption leading to denial of service or arbitrary code execution depending on exploitation conditions and the affected application's architecture. This vulnerability is not currently listed on the Known Exploited Vulnerabilities catalog and remains inactive on threat tracking lists. The extremely low EPSS score of 0.00043 indicates minimal current real-world exploitation activity and limited community attention, suggesting this remains a low-priority item for immediate remediation efforts compared to more widely exploited vulnerabilities.