Skip to contentWolfssl vulnerabilities
Newest
- wolfsslHeap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedDataCVE-2026-6094Fix available6.3 Medium
- wolfsshPotential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal ResizeCVE-2026-09302.3 Low
- wolfsslPrefix-substitution forgery via integer overflow in wolfCrypt CMACCVE-2026-5477Fix available8.2 High
- wolfsslInteger underflow in X.509 SAN parsing in wolfSSLCVE-2026-5188Fix available2.3 Low
- wolfsslImproper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication BypassCVE-2026-5500Fix available8.7 High
- wolfsslImproper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf CertificatesCVE-2026-5501Fix available8.6 High
- wolfsslwc_VerifyEccsiHash missing sanity checkCVE-2026-5466Fix available7.6 High
- wolfsslwolfSSL EVP ChaCha20-Poly1305 AEAD authentication tagCVE-2026-5479Fix available7.6 High
- wolfsslHeap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3CVE-2026-5460Fix available6.3 Medium
- wolfssl1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBeforeCVE-2026-5448Fix available2.3 Low
- wolfsslwolfSSL heap OOB read in PKCS7 SignedData streamingCVE-2026-5392Fix available2.3 Low
- wolfsslOOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTSCVE-2026-5393Fix available6.3 Medium
- wolfsslStack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OIDCVE-2026-5295Fix available5.9 Medium
- wolfsslout-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicNameCVE-2026-5503Fix available6.9 Medium
- wolfsslPKCS7 CBC Padding Oracle — Plaintext RecoveryCVE-2026-5504Fix available6.3 Medium
- wolfsslSession Cache Restore — Arbitrary Free via Deserialized PointerCVE-2026-5507Fix available4.1 Medium
- wolfsslMatchDomainName 1-Byte Stack Buffer Over-Read in Hostname ValidationCVE-2026-5772Fix available2.1 Low
- wolfsslInteger underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.CVE-2026-5778Fix available2.1 Low
- wolfsslDTLS 1.3 ACK heap buffer overflowCVE-2026-5264Fix available8.3 High
- wolfsslURI nameConstraints not enforced in ConfirmNameConstraints()CVE-2026-5263Fix available7.0 High
- wolfsslwolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuseCVE-2026-5446Fix available6.0 Medium
- wolfsslHeap buffer overflow in CertFromX509() via AuthorityKeyIdentifierCVE-2026-5447Fix available6.3 Medium
- wolfsslHeap Out-of-Bounds Write in DecodeObjectId() in wolfSSLCVE-2026-5187Fix available2.3 Low
- wolfsslwolfSSL ECDSA Certificate VerificationCVE-2026-5194Fix available9.3 Critical
- wolfsslwc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds readCVE-2026-4159Fix available1.2 Low
- wofssl wolfsslInteger Overflow in Certificate Chain AllocationCVE-2026-3229Fix available1.2 Low
- wolfsslImproper key_share validation in TLS 1.3 HelloRetryRequestCVE-2026-3230Fix available1.2 Low
- wolfsslHeap-based buffer overflow in wc_ecc_import_x963_ex KCAPI pathCVE-2026-4395Fix available1.3 Low
- wolfsslBuffer Overflow in HPKE via Oversized ECH ConfigCVE-2026-3849Fix available6.9 Medium
- wolfsslwolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validationCVE-2026-3547Fix available7.5 High
- wofssl wolfsslECH parsing heap buffer overflowCVE-2026-3549Fix available8.3 High
- wolfsslCompiler-induced timing leak in sp_256_get_entry_256_9 on RISC-VCVE-2026-3580Fix available2.1 Low
- wolfsslNon-constant time multiplication subroutine __muldi3 on RISC-V RV32ICVE-2026-3579Fix available2.1 Low
- wolfssl, wolfssl inc. (wolfcrypt) +1 moreFault injection attack with ML-DSA and ML-KEM on ARMCVE-2026-3503Fix available4.3 Medium
- wolfsslBuffer overflow in CRL number parsing in wolfSSLCVE-2026-3548Fix available7.2 High
- wolfsslHeap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() functionCVE-2026-2646Fix available5.0 Medium
- wolfsslAcceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2CVE-2026-2645Fix available5.5 Medium
- wolfsslInteger underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt pathCVE-2026-1005Fix available2.1 Low
- wolfsslStack buffer overflow in PKCS7 SignedData encoding with custom signed attributesCVE-2026-0819Fix available2.2 Low
- wolfssl wolfssl-pywolfSSL Python library `CERT_REQUIRED` mode fails to enforce client certificate requirementCVE-2025-15346Fix available9.3 Critical
- wolfsshClient SCP Request Triggers Buffer Overread by 1 ByteCVE-2025-153825.1 Medium
- wolfsshAuthentication BypassCVE-2025-149429.4 Critical
- wolfsslPotential non-constant time compiled code with Clang LLVMCVE-2025-13912Fix available1.0 Low
- wolfsslTLS 1.2 Client Can Downgrade Digest UsedCVE-2025-12889Fix available2.3 Low
- wolfsslTiming Side-Channel in PSK Binder VerificationCVE-2025-11932Fix available2.3 Low
- wolfsslInteger Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 DecryptCVE-2025-11931Fix available2.1 Low
- wolfsslConstant Time Issue with Xtensa-based ESP32 and X22519CVE-2025-12888Fix available1.0 Low
- wolfsslPotential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHelloCVE-2025-11936Fix available6.3 Medium
- wofssl wolfsslDoS Vulnerability in wolfSSL TLS 1.3 CKS ExtensionCVE-2025-11933Fix available2.3 Low
- wolfsslImproper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerifyCVE-2025-11934Fix available2.1 Low
- Show moreLoading…