Browse CVEs

HIGH 7.5 CVE-2026-11999 X.509 trust-chain bypass (path-depth exhaustion) in the OpenSSL compatibility certificate verifier (wolfSSL_X509_verify_cert()). This affects only bu… Wolfssl 5.9.2+ Fix from $1,9502026-06-25 HIGH 7.5 CVE-2026-5477 An integer overflow existed in the wolfCrypt CMAC implementation, that could be exploited to forge CMAC tags. The function wc_CmacUpdate used the gua… Wolfssl after 5.9.0 Fix from $1,9502026-04-10 HIGH 8.1 CVE-2026-5501 wolfSSL_X509_verify_cert in the OpenSSL compatibility layer accepts a certificate chain in which the leaf's signature is not checked, if the attacker… Wolfssl after 5.9.0 Fix from $1,9502026-04-10 MEDIUM 5.9 CVE-2026-5500 wolfSSL's wc_PKCS7_DecodeAuthEnvelopedData() does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check.… Wolfssl after 5.9.0 Fix from $1,6002026-04-10 HIGH 8.1 CVE-2026-5466 wolfSSL's ECCSI signature verifier `wc_VerifyEccsiHash` decodes the `r` and `s` scalars from the signature blob via `mp_read_unsigned_bin` with no ch… Wolfssl 5.9.1+ Fix from $1,9502026-04-10 HIGH 8.1 CVE-2026-5479 In wolfSSL's EVP layer, the ChaCha20-Poly1305 AEAD decryption path in wolfSSL_EVP_CipherFinal (and related EVP cipher finalization functions) fails t… Wolfssl 5.9.1+ Fix from $1,9502026-04-10 HIGH 8.1 CVE-2026-5188 An integer underflow issue exists in wolfSSL when parsing the Subject Alternative Name (SAN) extension of X.509 certificates. A malformed certificate… Wolfssl 5.9.1+ Fix from $1,9502026-04-10 MEDIUM 6.5 CVE-2026-5460 A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography (PQC) hybrid KeyShare processing. In the error handling path of TLSX_KeyS… Wolfssl 5.9.1+ Fix from $1,6002026-04-10 CRITICAL 9.1 CVE-2026-5393 Dual-Algorithm CertificateVerify out-of-bounds read. When processing a dual-algorithm CertificateVerify message, an out-of-bounds read can occur on c… Wolfssl 5.9.1+ Fix from $2,3002026-04-10 MEDIUM 5.4 CVE-2026-5392 Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-… Wolfssl 5.9.1+ Fix from $1,6002026-04-10 CRITICAL 9.1 CVE-2026-5503 In TLSX_EchChangeSNI, the ctx->extensions branch set extensions unconditionally even when TLSX_Find returned NULL. This caused TLSX_UseSNI to attach … Wolfssl after 5.9.0 Fix from $2,3002026-04-09 HIGH 8.0 CVE-2026-5295 A stack buffer overflow exists in wolfSSL's PKCS7 implementation in the wc_PKCS7_DecryptOri() function in wolfcrypt/src/pkcs7.c. When processing a CM… Wolfssl 5.9.1+ Fix from $1,9502026-04-09 MEDIUM 5.3 CVE-2026-5504 A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with … Wolfssl after 5.9.0 Fix from $1,6002026-04-09 MEDIUM 6.5 CVE-2026-5778 Integer underflow in wolfSSL packet sniffer <= 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS recor… Wolfssl 5.9.1+ Fix from $1,6002026-04-09 CRITICAL 9.8 CVE-2026-5264 Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overfl… Wolfssl 5.9.1+ Fix from $2,3002026-04-09 MEDIUM 6.5 CVE-2026-5263 URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c. A com… Wolfssl 5.9.1+ Fix from $1,6002026-04-09 MEDIUM 5.3 CVE-2026-5772 A 1-byte stack buffer over-read was identified in the MatchDomainName function (src/internal.c) during wildcard hostname validation when the LEFT_MOS… Wolfssl 5.9.1+ Fix from $1,6002026-04-09 HIGH 7.5 CVE-2026-5447 Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion. A heap buffer overflow occurs when converting an X.509 certificate in… Wolfssl 5.9.1+ Fix from $1,9502026-04-09 HIGH 7.1 CVE-2026-5446 In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wc_Ar… Wolfssl 5.9.1+ Fix from $1,9502026-04-09 CRITICAL 9.8 CVE-2026-5187 Two potential heap out-of-bounds write locations existed in DecodeObjectId() in wolfcrypt/src/asn.c. First, a bounds check only validates one availab… Wolfssl after 5.9.0 Fix from $2,3002026-04-09 CRITICAL 9.1 CVE-2026-5194 Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the … Wolfssl 5.9.1+ Fix from $2,3002026-04-09 CRITICAL 9.8 CVE-2026-3849 Stack Buffer Overflow in wc_HpkeLabeledExtract via Oversized ECH Config. A vulnerability existed in wolfSSL 5.8.4 ECH (Encrypted Client Hello) suppor… Wolfssl 5.9.0+ Fix from $2,3002026-03-19 CRITICAL 9.8 CVE-2026-4395 Heap-based buffer overflow in the KCAPI ECC code path of wc_ecc_import_x963_ex() in wolfSSL wolfcrypt allows a remote attacker to write attacker-cont… Wolfssl 5.9.0+ Fix from $2,3002026-03-19 CRITICAL 9.8 CVE-2026-3549 Heap Overflow in TLS 1.3 ECH parsing. An integer underflow existed in ECH extension parsing logic when calculating a buffer length, which resulted in… Wolfssl 5.9.0+ Fix from $2,3002026-03-19 HIGH 7.5 CVE-2026-3547 Out-of-bounds read in ALPN parsing due to incomplete validation. wolfSSL 5.8.4 and earlier contained an out-of-bounds read in ALPN handling when buil… Wolfssl 5.9.0+ Fix from $1,9502026-03-19 MEDIUM 5.5 CVE-2026-3229 An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written … Wolfssl 5.9.0+ Fix from $1,6002026-03-19 MEDIUM 5.9 CVE-2026-3579 wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted __muldi3 s… Wolfssl Patch available Fix from $1,6002026-03-19 MEDIUM 5.2 CVE-2026-3503 Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physi… Wolfssl 5.9.0+ Fix from $1,6002026-03-19 CRITICAL 9.8 CVE-2026-3548 Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap-based buffer overflow could occur when imprope… Wolfssl 5.9.0+ Fix from $2,3002026-03-19 HIGH 8.1 CVE-2026-2646 A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSL_d2i_SSL_SESSION() function. When deserializing session data with SESSION_CERTS enabl… Wolfssl 5.9.0+ Fix from $1,9502026-03-19