CVE-2026-15442

Name of the Vulnerable Software and Affected Versions wolfSSL (affected versions not specified)

Description Builds utilizing (D)TLS, including default configurations, contain conditional states during the TLS shutdown process that may result in a heap-use-after-free. This occurs if an application receives a partial wolfSSL read() result, often due to a small user buffer, and subsequently calls wolfSSL shutdown() for a bidirectional close. If the application attempts another wolfSSL read() while the peer continues sending data during the shutdown, a heap-use-after-free condition is triggered. A heap-use-after-free is a memory corruption issue where a program continues to use a pointer after the memory it points to has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.