Vulnerability · Published Mar 19, 2026 · Assigned by wolfSSL

CVE-2026-3503Fault injection attack with ML-DSA and ML-KEM on ARM

Medium 4.3

In plain English

A medium-severity security flaw in wolfSSL (wolfCrypt) from wolfSSL Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)4.3Medium

Exploit odds (30 days)0.2%top 94.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key material and/or cryptographic outcomes via induced transient faults that corrupt or redirect seed/pointer values during Keccak-based expansion. This issue affects wolfSSL (wolfCrypt): commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Alpine:v3.23	wolfssl	5.9.1-r0	ALPINE-CVE-2026-3503
Alpine:v3.24	wolfssl	5.9.0-r0	ALPINE-CVE-2026-3503
Debian:12	wolfssl	no fix listed	DEBIAN-CVE-2026-3503
Debian:13	wolfssl	no fix listed	DEBIAN-CVE-2026-3503
Ubuntu:22.04:LTS	wolfssl	no fix listed	UBUNTU-CVE-2026-3503
Ubuntu:24.04:LTS	wolfssl	no fix listed	UBUNTU-CVE-2026-3503
Ubuntu:25.10	wolfssl	no fix listed	UBUNTU-CVE-2026-3503
Ubuntu:26.04:LTS	wolfssl	no fix listed	UBUNTU-CVE-2026-3503
Ubuntu:26.10	wolfssl	no fix listed	UBUNTU-CVE-2026-3503

Affected products (as reported)

Vendor	Product	Versions
wolfSSL Inc.	wolfSSL (wolfCrypt)	5.8.2 – before 5.9.0

Weakness: CWE-335 · Vector: CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/U:Amber

References

https://github.com/wolfSSL/wolfssl/pull/9734 x_refsource_CONFIRM