Fuzz0X Team

**Name of the Vulnerable Software and Affected Versions** wolfSSL (affected versions not specified) **Description** Builds utilizing (D)TLS, including default configurations, contain conditional states during the TLS shutdown process that may result in a heap-use-after-free. This occurs if an application receives a partial `wolfSSL read()` result, often due to a small user buffer, and subsequently calls `wolfSSL shutdown()` for a bidirectional close. If the application attempts another `wolfSSL read()` while the peer continues sending data during the shutdown, a heap-use-after-free condition is triggered. A heap-use-after-free is a memory corruption issue where a program continues to use a pointer after the memory it points to has been freed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.