WolfSSL wolfSSL

• CVE-2026-15442 Low 2.3 Heap use-after-free on read during bidirectional (D)TLS shutdown 0.2%
• CVE-2026-89102 High 8.3 OCSP stapling v2 multi accepts non-CA chain certificates as issuers 0.1%
• CVE-2026-89133 Medium 6.3 NameConstraints not enforced across unconstrained intermediate CA 0.1%
• CVE-2026-89134 Medium 6.3 Subject CN name-constraint check bypassed when non-DNS SAN present 0.2%
• CVE-2026-89135 Medium 6.3 Failed X509_verify_cert leaves unverified CA in shared CertManager 0.1%
• CVE-2026-89136 High 8.3 Client accepts unsolicited RawPublicKey server certificate type 0.4%
• CVE-2026-93302 High 8.3 Trusted peer certificate match ignores public key, allowing forged CA clones 0.2%
• CVE-2026-93304 Medium 6.3 (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange 0.2%
• CVE-2026-94417 Low 2.3 CRL check skipped when OCSP enabled and certificate has no OCSP URL 0.2%
• CVE-2026-94418 Low 2.3 Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY 0.1%
• CVE-2026-94419 Low 2.3 Client session cache reference poisoning allows resumption with wrong server 0.1%
• CVE-2026-7511 Medium 5.9 PKCS7_verify signer confusion allows forged signatures to be accepted 0.3%
• CVE-2026-7532 Medium 5.7 iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined 0.3%
• CVE-2026-8720 Medium 5.9 HMAC-BLAKE2 final discards message when key length exceeds block size 0.2%
• CVE-2026-10098 Medium 6.3 OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status 0.2%
• CVE-2026-11703 Medium 6.0 Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption 0.4%
• CVE-2026-55962 Medium 6.0 TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify 0.2%
• CVE-2026-6092 Low 2.1 Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured 0.4%
• CVE-2026-6325 Low 2.0 Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list 0.3%
• CVE-2026-6329 Medium 6.0 PKCS#12 MAC verification uses attacker-controlled comparison length 0.2%
• CVE-2026-6330 Medium 6.3 ML-KEM ARM64 NEON ciphertext comparison only compares half of the input 0.2%
• CVE-2026-6331 Low 2.1 HMAC zero-length tag forgery in EVP_DigestVerifyFinal 0.2%
• CVE-2026-6412 Low 2.3 Continued acceptance of SHA-1/MD5 digests in certificate processing 0.1%
• CVE-2026-6450 Low 1.0 CRL critical extension bypass in ParseCRL_Extensions 0.3%
• CVE-2026-6678 Low 1.0 Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info 0.3%
• CVE-2026-6679 High 8.8 DTLS 1.3 ACK serialization heap buffer overflow via integer truncation 0.5%
• CVE-2026-6681 Low 1.0 PKCS#7 decode ignores caller output buffer size, writing past buffer bounds 0.4%
• CVE-2026-6731 Medium 6.0 X.509 name constraint bypass via Subject CN treated as a DNS name 0.1%
• CVE-2026-7531 Low 2.3 Use-after-free in PQC hybrid key-share handling 0.5%
• CVE-2026-10097 High 8.3 ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery 0.3%
• CVE-2026-10512 Low 2.3 X25519 x86_64 assembly final reduction leaves non-canonical field element 0.5%
• CVE-2026-10592 Medium 6.3 Wildcard DNS SAN bypasses CA name-constraint checks 0.2%
• CVE-2026-11310 High 8.7 X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring 0.2%
• CVE-2026-12340 Medium 6.3 Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation 0.3%
• CVE-2026-55958 High 8.3 Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage 0.4%
• CVE-2026-55960 High 8.2 Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation 0.2%
• CVE-2026-55964 Medium 6.3 Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption) 0.2%
• CVE-2026-11999 High 8.2 X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert() 0.2%
• CVE-2026-55967 Low 2.0 AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse 0.2%
• CVE-2026-55961 High 8.2 wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer 0.1%
• CVE-2026-6091 Medium 6.0 Partial-chain verification accepts untrusted intermediate as trust anchor 0.2%
• CVE-2026-6291 Medium 6.0 Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption 0.2%
• CVE-2026-6094 Medium 6.3 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData 0.5%
• CVE-2026-5477 High 8.2 Prefix-substitution forgery via integer overflow in wolfCrypt CMAC 0.4%
• CVE-2026-5188 Low 2.3 Integer underflow in X.509 SAN parsing in wolfSSL 0.1%
• CVE-2026-5500 High 8.7 Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication Bypass 0.5%
• CVE-2026-5501 High 8.6 Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates 0.3%
• CVE-2026-5466 High 7.6 wc_VerifyEccsiHash missing sanity check 0.2%
• CVE-2026-5479 High 7.6 wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag 0.2%
• CVE-2026-5460 Medium 6.3 Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3 0.2%