CVE-2026-5448

CVE-2026-5448 is a buffer overflow vulnerability in wolfSSL's X.509 certificate date parsing functions, specifically affecting the wolfSSL_X509_notAfter and wolfSSL_X509_notBefore APIs. The vulnerability is triggered only when applications directly call these compatibility layer functions with crafted X.509 certificates and does not impact standard TLS operations or certificate verification processes within wolfSSL. The vulnerability has a FAUCET Risk Score of 25.0/100, indicating low-to-moderate concern. While specific CVSS metrics are unavailable, the buffer overflow could potentially allow memory corruption if triggered through direct API calls. However, the limited attack surface due to the requirement for direct function invocation significantly constrains the practical impact and exploitation difficulty. There is no evidence of active exploitation, as indicated by the vulnerability's inactive status on known exploit tracking lists and lack of CISA KEV catalog inclusion. The extremely low EPSS score of 0.00017 suggests minimal community attention and low probability of widespread exploitation. No public exploit code or significant security community discussion has emerged around this vulnerability.