Skip to contentWolfssl vulnerabilities
Newest
- wolfsslForward Secrecy Violation in WolfSSL TLS 1.3CVE-2025-11935Fix available6.3 Medium
- wolfsshHost verification bypass and credential leakCVE-2025-116259.4 Critical
- wolfsshBuffer overwrite when processing file handles with the SFTP serverCVE-2025-116241.8 Low
- wolfsslCurve25519 BlindingCVE-2025-73965.6 Medium
- wolfsslIn the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as...CVE-2025-7394Fix available7.0 High
- wolfsslDomain Name Validation Bypass with Apple Native Certificate ValidationCVE-2025-7395Fix available9.2 Critical
- wolfssl wolfcrypt, wolfssl +1 moreFault Injection of EdDSA signature in WolfCryptCVE-2024-2881Fix available6.7 Medium
- wolfssl, wolfssl wolfcrypt +1 moreAES T-Table sub-cache-line leakageCVE-2024-1543Fix available4.1 Medium
- wolfsslECDSA nonce bias caused by truncationCVE-2024-1544Fix available4.1 Medium
- wolfsslUnverifed Ciphersuite used on a client-side TLS1.3 DowngradeCVE-2024-5814Fix available5.1 Medium
- wolfsslSafe-error attack on TLS 1.3 ProtocolCVE-2024-5288Fix available5.1 Medium
- wolfsslBuffer overread in domain name matchingCVE-2024-5991Fix available10.0 Critical
- wolfssl wolfcrypt, wolfssl +1 moreFault Injection of RSA encryption in WolfCryptCVE-2024-1545Fix available5.9 Medium
- wolfsslSEGV and out of bounds memory read from malicious packetCVE-2024-0901Fix available7.5 High
- wolfsshUser authentication bypass in wolfSSH serverCVE-2024-28739.1 Critical
- wolfsslHeap-buffer over-read with WOLFSSL_CALLBACKSCVE-2023-6936Fix available5.3 Medium
- wolfsslImproper (D)TLS key boundary enforcementCVE-2023-6937Fix available5.3 Medium
- wolfsslMarvin Attack vulnerability in SP Math All RSACVE-2023-6935Fix available5.9 Medium
- wolfsslTLS 1.3 client issue handling malicious server when not including a KSE and PSK extensionCVE-2023-3724Fix available9.1 Critical
- wolfsslIn wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then...CVE-2022-42905Fix available9.1 Critical
- wolfsslAn issue was discovered in wolfSSL before 5.5.0. A fault injection attack on RAM via Rowhammer...CVE-2022-42961Fix available5.3 Medium
- wolfsslIn wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake...CVE-2022-39173Fix available7.5 High
- wolfsslwolfSSL through 5.0.0 allows an attacker to cause a denial of service and infinite loop in the...CVE-2021-44718Fix available5.9 Medium
- wolfsslAn issue was discovered in wolfSSL before 5.5.0 (when --enable-session-ticket is used); however,...CVE-2022-38153Fix available5.9 Medium
- wolfsslAn issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL...CVE-2022-38152Fix available7.5 High
- wolfsslwolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a...CVE-2022-34293Fix available7.5 High
- wolfsslIn wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual...CVE-2022-25640Public exploitFix available7.5 High
- wolfsslIn wolfSSL before 5.2.0, certificate validation may be bypassed during attempted authentication...CVE-2022-25638Fix available6.5 Medium
- wolfsslwolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations. This affects...CVE-2022-23408Fix available9.1 Critical
- wolfssl wolfmqttwolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (4 bytes) in MqttDecode_Publish (called...CVE-2021-459325.5 Medium
- wolfssl wolfmqttwolfSSL wolfMQTT 1.9 has a heap-based buffer overflow (8 bytes) in MqttDecode_Publish (called...CVE-2021-459335.5 Medium
- wolfssl wolfmqttwolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from...CVE-2021-459345.5 Medium
- wolfssl wolfmqttwolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttDecode_Disconnect (called from...CVE-2021-459365.5 Medium
- wolfssl wolfmqttwolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from...CVE-2021-459375.5 Medium
- wolfssl wolfmqttwolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from...CVE-2021-459385.5 Medium
- wolfssl wolfmqttwolfSSL wolfMQTT 1.9 has a heap-based buffer overflow in MqttClient_DecodePacket (called from...CVE-2021-459395.5 Medium
- wolfsslwolfSSL before 4.8.1 incorrectly skips OCSP verification in certain situations of irrelevant...CVE-2021-38597Fix available5.9 Medium
- wolfsslwolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial...CVE-2021-37155Fix available9.8 Critical
- wolfsslIn wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system...CVE-2021-24116Fix available4.9 Medium
- wolfsslDoTls13CertificateVerify in tls13.c in wolfSSL through 4.6.0 does not cease processing for...CVE-2021-3336Fix available8.1 High
- wolfsslRsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain...CVE-2020-36177Fix available9.8 Critical
- wolfsslwolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAIT_CERT_CR state, within...CVE-2020-24613Fix available6.8 Medium
- wolfsslAn issue was discovered in wolfSSL before 4.5.0, when single precision is not employed. Local...CVE-2020-15309Fix available7.0 High
- wolfsslAn issue was discovered in wolfSSL before 4.5.0. It mishandles the change_cipher_spec (CCS)...CVE-2020-12457Fix available7.5 High
- wolfsslAn issue was discovered in the DTLS handshake implementation in wolfSSL before 4.5.0. Clear DTLS...CVE-2020-24585Fix available5.3 Medium
- wolfsslThe private-key operations in ecc.c in wolfSSL before 4.4.0 do not use a constant-time modular...CVE-2020-11735Fix available5.3 Medium
- wolfsslwolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing...CVE-2020-11713Fix available7.5 High
- wolfsslwolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls...CVE-2014-28989.8 Critical
- wolfsslThe SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding...CVE-2014-28979.8 Critical
- wolfsslThe DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4...CVE-2014-28969.8 Critical
- Show moreLoading…