diff --git a/core/iwasm/interpreter/wasm_loader.c b/core/iwasm/interpreter/wasm_loader.c
index a2c67bea2c..36a5c3fadf 100644
--- a/core/iwasm/interpreter/wasm_loader.c
+++ b/core/iwasm/interpreter/wasm_loader.c
@@ -5681,6 +5681,7 @@ handle_branch_hint_section(const uint8 *buf, const uint8 *buf_end,
                 goto fail;
             }
 
+            CHECK_BUF(buf, buf_end, 1);
             uint8 data = *buf++;
             if (data == 0x00)
                 new_hint->is_likely = false;