Skip to content
Wolfssl Inc. vulnerabilities
Newest
-
wolfssh
wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion
CVE-2026-84897
Fix available
6.9 Medium
-
wolfssh
wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms
CVE-2026-83742
Fix available
5.3 Medium
-
wolfssh
wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check
CVE-2026-81535
Fix available
6.3 Medium
-
wolfssh
wolfSSH ECDSA host key curve not validated against negotiated algorithm
CVE-2026-16516
Fix available
9.0 Critical
-
wolfssl wolfengine
wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records
CVE-2026-81341
6.5 Medium
-
wolfssl wolfengine
wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
CVE-2026-81020
7.4 High
-
wolfssl wolfprovider
wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
CVE-2026-81019
7.4 High
-
wolfssl
Buffer Overflow in HPKE via Oversized ECH Config
CVE-2026-3849
Fix available
6.9 Medium
-
wolfssl, wolfssl inc. (wolfcrypt) +1 more
Fault injection attack with ML-DSA and ML-KEM on ARM
CVE-2026-3503
Fix available
4.3 Medium
-
wolfssl inc. wolftpm
wolfTPM library wrapper function `wolfTPM2_RsaKey_TpmToWolf` copies external data to a fixed-size stack buffer without length validation potentially causing stack-based buffer overflow
CVE-2025-7844
1.0 Low
-
wolfssl
Safe-error attack on TLS 1.3 Protocol
CVE-2024-5288
Fix available
5.1 Medium
-
wolfssh
User authentication bypass in wolfSSH server
CVE-2024-2873
9.1 Critical