cve/2024/CVE-2024-0901.md

### [CVE-2024-0901](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0901)
![](https://img.shields.io/static/v1?label=Product&message=wolfSSL&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=3.12.2%3C%3D%205.6.6%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-129%20Improper%20Validation%20of%20Array%20Index&color=brighgreen)

### Description

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/byan-2/wolfssl
- https://github.com/byan682/wolfssl
- https://github.com/lego-pirates/wolfssl
- https://github.com/qursa-uc3m/wolfssl-liboqs
- https://github.com/wolfSSL/Arduino-wolfSSL
- https://github.com/wolfSSL/wolfssl