wolfSSL_jll vulnerabilities (Julia)
91 vulnerabilities.
-
wolfSSL_jllJulia PKCS7_verify signer confusion allows forged signatures to be accepted 5.9 Medium -
wolfSSL_jllJulia iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined 5.7 Medium -
wolfSSL_jllJulia OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status 6.3 Medium -
wolfSSL_jllJulia Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption 6.0 Medium -
wolfSSL_jllJulia TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify 6.0 Medium -
wolfSSL_jllJulia Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured 2.1 Low -
wolfSSL_jllJulia Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list 2.0 Low -
wolfSSL_jllJulia PKCS#12 MAC verification uses attacker-controlled comparison length 6.0 Medium -
wolfSSL_jllJulia ML-KEM ARM64 NEON ciphertext comparison only compares half of the input 6.3 Medium -
wolfSSL_jllJulia HMAC zero-length tag forgery in EVP_DigestVerifyFinal 2.1 Low -
wolfSSL_jllJulia Continued acceptance of SHA-1/MD5 digests in certificate processing 2.3 Low -
wolfSSL_jllJulia CRL critical extension bypass in ParseCRL_Extensions 1.0 Low -
wolfSSL_jllJulia Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info 1.0 Low -
wolfSSL_jllJulia DTLS 1.3 ACK serialization heap buffer overflow via integer truncation 8.8 High -
wolfSSL_jllJulia PKCS#7 decode ignores caller output buffer size, writing past buffer bounds 1.0 Low -
wolfSSL_jllJulia X.509 name constraint bypass via Subject CN treated as a DNS name 6.0 Medium -
wolfSSL_jllJulia Use-after-free in PQC hybrid key-share handling 2.3 Low -
wolfSSL_jllJulia ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery 8.3 High -
wolfSSL_jllJulia X25519 x86_64 assembly final reduction leaves non-canonical field element 2.3 Low -
wolfSSL_jllJulia Wildcard DNS SAN bypasses CA name-constraint checks 6.3 Medium -
wolfSSL_jllJulia X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring 8.7 High -
wolfSSL_jllJulia Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation 6.3 Medium -
wolfSSL_jllJulia Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage 8.3 High -
wolfSSL_jllJulia Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation 8.2 High -
wolfSSL_jllJulia Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption) 6.3 Medium -
wolfSSL_jllJulia X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert() 8.2 High -
wolfSSL_jllJulia AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse 2.0 Low -
wolfSSL_jllJulia wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer 8.2 High -
wolfSSL_jllJulia Partial-chain verification accepts untrusted intermediate as trust anchor 6.0 Medium -
wolfSSL_jllJulia Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption 6.0 Medium -
wolfSSL_jllJulia Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData 6.3 Medium -
wolfSSL_jllJulia Prefix-substitution forgery via integer overflow in wolfCrypt CMAC 8.2 High -
wolfSSL_jllJulia Integer underflow in X.509 SAN parsing in wolfSSL 2.3 Low -
wolfSSL_jllJulia Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication Bypass 8.7 High -
wolfSSL_jllJulia Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates 8.6 High -
wolfSSL_jllJulia wc_VerifyEccsiHash missing sanity check 7.6 High -
wolfSSL_jllJulia wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag 7.6 High -
wolfSSL_jllJulia Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3 6.3 Medium -
wolfSSL_jllJulia 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore 2.3 Low -
wolfSSL_jllJulia wolfSSL heap OOB read in PKCS7 SignedData streaming 2.3 Low -
wolfSSL_jllJulia OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS 6.3 Medium -
wolfSSL_jllJulia Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID 5.9 Medium -
wolfSSL_jllJulia out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName 6.9 Medium -
wolfSSL_jllJulia PKCS7 CBC Padding Oracle — Plaintext Recovery 6.3 Medium -
wolfSSL_jllJulia Session Cache Restore — Arbitrary Free via Deserialized Pointer 4.1 Medium -
wolfSSL_jllJulia MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation 2.1 Low -
wolfSSL_jllJulia Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path. 2.1 Low -
wolfSSL_jllJulia DTLS 1.3 ACK heap buffer overflow 8.3 High -
wolfSSL_jllJulia URI nameConstraints not enforced in ConfirmNameConstraints() 7.0 High -
wolfSSL_jllJulia wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse 6.0 Medium - Show olderLoading…