Wolfssl vulnerabilities

Products

• Wolfssl 154
• Wolfssh 11
• Wolfmqtt 7
• Wolfcrypt 3
• Wolfengine 2

Newest

• wolfssh wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion CVE-2026-84897 Fix available 6.9 MediumOctober 7, 2026
• wolfssh wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms CVE-2026-83742 Fix available 5.3 MediumOctober 7, 2026
• wolfssh wolfSSHd on Windows race condition leading to logon token reused across connections CVE-2026-83540 Fix available 7.7 HighOctober 7, 2026
• wolfssh wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check CVE-2026-81535 Fix available 6.3 MediumOctober 7, 2026
• wolfssh wolfSSH ECDSA host key curve not validated against negotiated algorithm CVE-2026-16516 Fix available 9.0 CriticalOctober 7, 2026
• wolfssl Heap use-after-free on read during bidirectional (D)TLS shutdown CVE-2026-15442 Fix available 2.3 LowSeptember 27, 2026
• wolfssl OCSP stapling v2 multi accepts non-CA chain certificates as issuers CVE-2026-89102 Fix available 8.3 HighSeptember 27, 2026
• wolfssl NameConstraints not enforced across unconstrained intermediate CA CVE-2026-89133 Fix available 6.3 MediumSeptember 27, 2026
• wolfssl Subject CN name-constraint check bypassed when non-DNS SAN present CVE-2026-89134 Fix available 6.3 MediumSeptember 27, 2026
• wolfssl Failed X509_verify_cert leaves unverified CA in shared CertManager CVE-2026-89135 Fix available 6.3 MediumSeptember 27, 2026
• wolfssl Client accepts unsolicited RawPublicKey server certificate type CVE-2026-89136 Fix available 8.3 HighSeptember 27, 2026
• wolfssl Trusted peer certificate match ignores public key, allowing forged CA clones CVE-2026-93302 Fix available 8.3 HighSeptember 27, 2026
• wolfssl (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange CVE-2026-93304 Fix available 6.3 MediumSeptember 27, 2026
• wolfssl CRL check skipped when OCSP enabled and certificate has no OCSP URL CVE-2026-94417 2.3 LowSeptember 27, 2026
• wolfssl Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY CVE-2026-94418 Fix available 2.3 LowSeptember 27, 2026
• wolfssl Client session cache reference poisoning allows resumption with wrong server CVE-2026-94419 Fix available 2.3 LowSeptember 27, 2026
• wolfssl wolfengine wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records CVE-2026-81341 6.5 MediumAugust 28, 2026
• wolfssl wolfengine wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record CVE-2026-81020 7.4 HighAugust 28, 2026
• wolfssl wolfprovider wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record CVE-2026-81019 7.4 HighAugust 28, 2026
• wolfssl PKCS7_verify signer confusion allows forged signatures to be accepted CVE-2026-7511 Fix available 5.9 MediumJune 25, 2026
• wolfssl iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined CVE-2026-7532 Fix available 5.7 MediumJune 25, 2026
• wolfssl HMAC-BLAKE2 final discards message when key length exceeds block size CVE-2026-8720 Fix available 5.9 MediumJune 25, 2026
• wolfssl OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status CVE-2026-10098 Fix available 6.3 MediumJune 25, 2026
• wolfssl Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption CVE-2026-11703 Fix available 6.0 MediumJune 25, 2026
• wolfssl TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify CVE-2026-55962 Fix available 6.0 MediumJune 25, 2026
• wolfssl Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured CVE-2026-6092 Fix available 2.1 LowJune 25, 2026
• wolfssl Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list CVE-2026-6325 Fix available 2.0 LowJune 25, 2026
• wolfssl PKCS#12 MAC verification uses attacker-controlled comparison length CVE-2026-6329 Fix available 6.0 MediumJune 25, 2026
• wolfssl ML-KEM ARM64 NEON ciphertext comparison only compares half of the input CVE-2026-6330 Public exploitFix available 6.3 MediumJune 25, 2026
• wolfssl HMAC zero-length tag forgery in EVP_DigestVerifyFinal CVE-2026-6331 Fix available 2.1 LowJune 25, 2026
• wolfssl Continued acceptance of SHA-1/MD5 digests in certificate processing CVE-2026-6412 Fix available 2.3 LowJune 25, 2026
• wolfssl CRL critical extension bypass in ParseCRL_Extensions CVE-2026-6450 Fix available 1.0 LowJune 25, 2026
• wolfssl Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info CVE-2026-6678 Fix available 1.0 LowJune 25, 2026
• wolfssl DTLS 1.3 ACK serialization heap buffer overflow via integer truncation CVE-2026-6679 Fix available 8.8 HighJune 25, 2026
• wolfssl PKCS#7 decode ignores caller output buffer size, writing past buffer bounds CVE-2026-6681 Fix available 1.0 LowJune 25, 2026
• wolfssl X.509 name constraint bypass via Subject CN treated as a DNS name CVE-2026-6731 Fix available 6.0 MediumJune 25, 2026
• wolfssl Use-after-free in PQC hybrid key-share handling CVE-2026-7531 Fix available 2.3 LowJune 25, 2026
• wolfssl ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery CVE-2026-10097 Fix available 8.3 HighJune 25, 2026
• wolfssl X25519 x86_64 assembly final reduction leaves non-canonical field element CVE-2026-10512 Fix available 2.3 LowJune 25, 2026
• wolfssl Wildcard DNS SAN bypasses CA name-constraint checks CVE-2026-10592 Fix available 6.3 MediumJune 25, 2026
• wolfssl X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring CVE-2026-11310 Fix available 8.7 HighJune 25, 2026
• wolfssl Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation CVE-2026-12340 Fix available 6.3 MediumJune 25, 2026
• wolfssl Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage CVE-2026-55958 Fix available 8.3 HighJune 25, 2026
• wolfssl Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation CVE-2026-55960 Fix available 8.2 HighJune 25, 2026
• wolfssl Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption) CVE-2026-55964 Fix available 6.3 MediumJune 25, 2026
• wolfssl X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert() CVE-2026-11999 Fix available 8.2 HighJune 25, 2026
• wolfssl AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse CVE-2026-55967 Fix available 2.0 LowJune 25, 2026
• wolfssl wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer CVE-2026-55961 Fix available 8.2 HighJune 25, 2026
• wolfssl Partial-chain verification accepts untrusted intermediate as trust anchor CVE-2026-6091 Fix available 6.0 MediumJune 25, 2026
• wolfssl Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption CVE-2026-6291 Fix available 6.0 MediumJune 25, 2026
• Show olderLoading…