CVE-2026-15442
— UNSCOREDpublic exploit availablePublished 2026-09-27 · Updated 2026-09-28
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
In all builds that make use of (D)TLS, including default builds, there is a series of conditional states during the TLS shutdown which could lead to a heap-use-after free. If an application ended up getting a partial wolfSSL_read() which is sometimes caused by a small user buffer passed in, then called wolfSSL_shutdown for a bidirectional close and attempted to wolfSSL_read() again while the peer continues trying to send data during the shutdown it would lead to a state where a potential heap-use-after free happened.
Weaknesses
CWE-416
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-0163
- LOWCVE-2026-100503PoC
- HIGHCVE-2026-100757
- HIGHCVE-2026-100761
- CRITICALCVE-2026-100762
- HIGHCVE-2026-100765
- HIGHCVE-2026-100767
- HIGHCVE-2026-100768
Related by shared AI tags and CWE weakness class. Browse the full archive.