The flaw in wolfSSL_X509_verify_cert() allows a supplied chain that exceeds the verifier's maximum path depth (default 100) to bypass the trust anchor check. When the chain is deeper than this limit, the verifier runs out of depth while still iterating over untrusted intermediates and returns success based solely on the last link, even though no configured anchor is reached. This permits an attacker to present a rogue certificate that the application will accept as valid, effectively allowing impersonation of servers or clients.

The vulnerability applies only to wolfSSL builds compiled with the --enable-opensslextra flag that use X509_verify_cert() and pass caller‑supplied untrusted intermediates. Applications that rely on wolfSSL's default TLS handshake (WOLFSSL_VERIFY_PEER) are unaffected. No specific version numbers are listed, so any build using this configuration may be vulnerable.

With a CVSS score of 8.2, the vulnerability is considered high. The EPSS score is not available and it is not listed in the CISA KEV catalog, indicating no confirmed exploitation yet. The attack requires an application that performs manual or deferred certificate verification through the vulnerable API and an attacker who can supply a chain deeper than the maximum path depth. The resulting attack vector could enable man‑in‑the‑middle attacks or unauthorized identity impersonation.