CVE-2019-6439 (NVD)

2019-01-16

examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow.

Products Wolfssl
Type Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
First patch - None (likely due to unavailable code)
Links http://www.securityfocus.com/bid/106640
https://github.com/wolfSSL/wolfssl/issues/2032