CVE-2026-115942: Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow read

As cited

Copy frozen at 2026-10-28 23:40 UTC (site build).

vulnerabilities

CVE-2026-115942: Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow read

Apache Qpid Proton C through version 0.40.0 contains a stack buffer overflow vulnerability triggered when validating a non-compliant wildcard transport layer security (TLS) certificate. The fixed version 0.41.1 restricts certificate validation to RFC 9525-compliant certificates, eliminating the exposure.

Why it matters: Organizations running Qpid Proton C up to 0.40.0 in environments where malicious or misconfigured TLS certificates are possible should upgrade immediately to prevent stack read overflows that could lead to denial of service or information disclosure.

Source published

2026-10-28 20:47 UTC

First seen by Cybersecurity Tracker

2026-10-28 22:53 UTC