WolfSSL wolfSSL

• CVE-2026-5448 Low 2.3 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore 0.3%
• CVE-2026-5392 Low 2.3 wolfSSL heap OOB read in PKCS7 SignedData streaming 0.2%
• CVE-2026-5393 Medium 6.3 OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS 0.2%
• CVE-2026-5295 Medium 5.9 Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID 0.2%
• CVE-2026-5503 Medium 6.9 out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName 0.5%
• CVE-2026-5504 Medium 6.3 PKCS7 CBC Padding Oracle — Plaintext Recovery 0.1%
• CVE-2026-5507 Medium 4.1 Session Cache Restore — Arbitrary Free via Deserialized Pointer 0.2%
• CVE-2026-5772 Low 2.1 MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation 0.2%
• CVE-2026-5778 Low 2.1 Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path. 0.2%
• CVE-2026-5264 High 8.3 DTLS 1.3 ACK heap buffer overflow 0.5%
• CVE-2026-5263 High 7.0 URI nameConstraints not enforced in ConfirmNameConstraints() 0.2%
• CVE-2026-5446 Medium 6.0 wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse 0.3%
• CVE-2026-5447 Medium 6.3 Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifier 0.4%
• CVE-2026-5187 Low 2.3 Heap Out-of-Bounds Write in DecodeObjectId() in wolfSSL 0.3%
• CVE-2026-5194 Critical 9.3 wolfSSL ECDSA Certificate Verification 0.6%
• CVE-2026-4159 Low 1.2 wc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read <0.1%
• CVE-2026-3230 Low 1.2 Improper key_share validation in TLS 1.3 HelloRetryRequest 0.2%
• CVE-2026-4395 Low 1.3 Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path 0.4%
• CVE-2026-3547 High 7.5 wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation 0.3%
• CVE-2026-3580 Low 2.1 Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V 0.1%
• CVE-2026-3579 Low 2.1 Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I 0.3%
• CVE-2026-3548 High 7.2 Buffer overflow in CRL number parsing in wolfSSL 0.5%
• CVE-2026-2646 Medium 5.0 Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function 0.1%
• CVE-2026-2645 Medium 5.5 Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2 0.1%
• CVE-2026-1005 Low 2.1 Integer underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path 0.3%
• CVE-2026-0819 Low 2.2 Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes 0.1%
• CVE-2025-13912 Low 1.0 Potential non-constant time compiled code with Clang LLVM 0.1%
• CVE-2025-12889 Low 2.3 TLS 1.2 Client Can Downgrade Digest Used 0.1%
• CVE-2025-11932 Low 2.3 Timing Side-Channel in PSK Binder Verification 0.3%
• CVE-2025-11931 Low 2.1 Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt 0.3%
• CVE-2025-12888 Low 1.0 Constant Time Issue with Xtensa-based ESP32 and X22519 0.3%
• CVE-2025-11936 Medium 6.3 Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello 0.5%
• CVE-2025-11934 Low 2.1 Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify 0.2%
• CVE-2025-11935 Medium 6.3 Forward Secrecy Violation in WolfSSL TLS 1.3 0.2%
• CVE-2025-7396 Medium 5.6 Curve25519 Blinding 0.2%
• CVE-2025-7394 High 7.0 In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for predictable values returned from RAND_bytes() after fork() is 0.5%
• CVE-2025-7395 Critical 9.2 Domain Name Validation Bypass with Apple Native Certificate Validation 0.3%
• CVE-2024-1543 Medium 4.1 AES T-Table sub-cache-line leakage 0.2%
• CVE-2024-1544 Medium 4.1 ECDSA nonce bias caused by truncation 0.3%
• CVE-2024-5814 Medium 5.1 Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade 0.5%
• CVE-2024-5991 Critical 10.0 Buffer overread in domain name matching 0.6%
• CVE-2024-0901 High 7.5 SEGV and out of bounds memory read from malicious packet 0.7%
• CVE-2023-6936 Medium 5.3 Heap-buffer over-read with WOLFSSL_CALLBACKS 0.6%
• CVE-2023-6937 Medium 5.3 Improper (D)TLS key boundary enforcement 0.5%
• CVE-2023-6935 Medium 5.9 Marvin Attack vulnerability in SP Math All RSA 0.5%
• CVE-2023-3724 Critical 9.1 TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension 0.7%