# cve.now: Wolfssl

The newest entries naming Wolfssl as an affected vendor (up to 200), of 118 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-84897](https://cve.now/CVE-2026-84897.md): wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion (CVSS 6.9)
- [CVE-2026-83742](https://cve.now/CVE-2026-83742.md): wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms (CVSS 5.3)
- [CVE-2026-83540](https://cve.now/CVE-2026-83540.md): wolfSSHd on Windows race condition leading to logon token reused across connections (CVSS 7.7)
- [CVE-2026-81535](https://cve.now/CVE-2026-81535.md): wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check (CVSS 6.3)
- [CVE-2026-16516](https://cve.now/CVE-2026-16516.md): wolfSSH ECDSA host key curve not validated against negotiated algorithm (CVSS 9.0)
- [CVE-2026-15442](https://cve.now/CVE-2026-15442.md): Heap use-after-free on read during bidirectional (D)TLS shutdown (CVSS 2.3)
- [CVE-2026-89102](https://cve.now/CVE-2026-89102.md): OCSP stapling v2 multi accepts non-CA chain certificates as issuers (CVSS 8.3)
- [CVE-2026-89133](https://cve.now/CVE-2026-89133.md): NameConstraints not enforced across unconstrained intermediate CA (CVSS 6.3)
- [CVE-2026-89134](https://cve.now/CVE-2026-89134.md): Subject CN name-constraint check bypassed when non-DNS SAN present (CVSS 6.3)
- [CVE-2026-89135](https://cve.now/CVE-2026-89135.md): Failed X509\_verify\_cert leaves unverified CA in shared CertManager (CVSS 6.3)
- [CVE-2026-89136](https://cve.now/CVE-2026-89136.md): Client accepts unsolicited RawPublicKey server certificate type (CVSS 8.3)
- [CVE-2026-93302](https://cve.now/CVE-2026-93302.md): Trusted peer certificate match ignores public key, allowing forged CA clones (CVSS 8.3)
- [CVE-2026-93304](https://cve.now/CVE-2026-93304.md): (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange (CVSS 6.3)
- [CVE-2026-94417](https://cve.now/CVE-2026-94417.md): CRL check skipped when OCSP enabled and certificate has no OCSP URL (CVSS 2.3)
- [CVE-2026-94418](https://cve.now/CVE-2026-94418.md): Signature failure masked by date error under WOLFSSL\_SMALL\_CERT\_VERIFY (CVSS 2.3)
- [CVE-2026-94419](https://cve.now/CVE-2026-94419.md): Client session cache reference poisoning allows resumption with wrong server (CVSS 2.3)
- [CVE-2026-81341](https://cve.now/CVE-2026-81341.md): wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records (CVSS 6.5)
- [CVE-2026-81020](https://cve.now/CVE-2026-81020.md): wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record (CVSS 7.4)
- [CVE-2026-81019](https://cve.now/CVE-2026-81019.md): wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record (CVSS 7.4)
- [CVE-2026-7511](https://cve.now/CVE-2026-7511.md): PKCS7\_verify signer confusion allows forged signatures to be accepted (CVSS 5.9)
- [CVE-2026-7532](https://cve.now/CVE-2026-7532.md): iPAddress name constraints not enforced when WOLFSSL\_IP\_ALT\_NAME is undefined (CVSS 5.7)
- [CVE-2026-8720](https://cve.now/CVE-2026-8720.md): HMAC-BLAKE2 final discards message when key length exceeds block size (CVSS 5.9)
- [CVE-2026-10098](https://cve.now/CVE-2026-10098.md): OCSP CertID serial-number length-confusion in wolfSSL\_OCSP\_resp\_find\_status (CVSS 6.3)
- [CVE-2026-11703](https://cve.now/CVE-2026-11703.md): Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption (CVSS 6.0)
- [CVE-2026-55962](https://cve.now/CVE-2026-55962.md): TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify (CVSS 6.0)
- [CVE-2026-6092](https://cve.now/CVE-2026-6092.md): Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE\_ENCRYPT\_THEN\_MAC is configured (CVSS 2.1)
- [CVE-2026-6325](https://cve.now/CVE-2026-6325.md): Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list (CVSS 2.0)
- [CVE-2026-6329](https://cve.now/CVE-2026-6329.md): PKCS#12 MAC verification uses attacker-controlled comparison length (CVSS 6.0)
- [CVE-2026-6330](https://cve.now/CVE-2026-6330.md): ML-KEM ARM64 NEON ciphertext comparison only compares half of the input (CVSS 6.3)
- [CVE-2026-6331](https://cve.now/CVE-2026-6331.md): HMAC zero-length tag forgery in EVP\_DigestVerifyFinal (CVSS 2.1)
- [CVE-2026-6412](https://cve.now/CVE-2026-6412.md): Continued acceptance of SHA-1/MD5 digests in certificate processing (CVSS 2.3)
- [CVE-2026-6450](https://cve.now/CVE-2026-6450.md): CRL critical extension bypass in ParseCRL\_Extensions (CVSS 1.0)
- [CVE-2026-6678](https://cve.now/CVE-2026-6678.md): Integer underflow in wc\_PKCS7\_DecryptOri handling crafted Other Recipient Info (CVSS 1.0)
- [CVE-2026-6679](https://cve.now/CVE-2026-6679.md): DTLS 1.3 ACK serialization heap buffer overflow via integer truncation (CVSS 8.8)
- [CVE-2026-6681](https://cve.now/CVE-2026-6681.md): PKCS#7 decode ignores caller output buffer size, writing past buffer bounds (CVSS 1.0)
- [CVE-2026-6731](https://cve.now/CVE-2026-6731.md): X.509 name constraint bypass via Subject CN treated as a DNS name (CVSS 6.0)
- [CVE-2026-7531](https://cve.now/CVE-2026-7531.md): Use-after-free in PQC hybrid key-share handling (CVSS 2.3)
- [CVE-2026-10097](https://cve.now/CVE-2026-10097.md): ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery (CVSS 8.3)
- [CVE-2026-10512](https://cve.now/CVE-2026-10512.md): X25519 x86\_64 assembly final reduction leaves non-canonical field element (CVSS 2.3)
- [CVE-2026-10592](https://cve.now/CVE-2026-10592.md): Wildcard DNS SAN bypasses CA name-constraint checks (CVSS 6.3)
- [CVE-2026-11310](https://cve.now/CVE-2026-11310.md): X.509 trust-chain bypass in wolfSSL\_X509\_verify\_cert() via untrusted intermediate anchoring (CVSS 8.7)
- [CVE-2026-12340](https://cve.now/CVE-2026-12340.md): Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation (CVSS 6.3)
- [CVE-2026-55958](https://cve.now/CVE-2026-55958.md): Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip\_StoreMessage (CVSS 8.3)
- [CVE-2026-55960](https://cve.now/CVE-2026-55960.md): Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation (CVSS 8.2)
- [CVE-2026-55964](https://cve.now/CVE-2026-55964.md): Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption) (CVSS 6.3)
- [CVE-2026-11999](https://cve.now/CVE-2026-11999.md): X.509 trust-chain bypass via path-depth exhaustion in wolfSSL\_X509\_verify\_cert() (CVSS 8.2)
- [CVE-2026-55967](https://cve.now/CVE-2026-55967.md): AES-GCM streaming APIs do not reject \>64 GiB cumulative single messages, enabling counter wrap and keystream reuse (CVSS 2.0)
- [CVE-2026-55961](https://cve.now/CVE-2026-55961.md): wolfSSL\_PKCS7\_verify() reports success for degenerate (certs-only) PKCS#7 with no signer (CVSS 8.2)
- [CVE-2026-6091](https://cve.now/CVE-2026-6091.md): Partial-chain verification accepts untrusted intermediate as trust anchor (CVSS 6.0)
- [CVE-2026-6291](https://cve.now/CVE-2026-6291.md): Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption (CVSS 6.0)
- [CVE-2026-6094](https://cve.now/CVE-2026-6094.md): Heap buffer overread in wc\_PKCS7\_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData (CVSS 6.3)
- [CVE-2026-0930](https://cve.now/CVE-2026-0930.md): Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize (CVSS 2.3)
- [CVE-2026-5477](https://cve.now/CVE-2026-5477.md): Prefix-substitution forgery via integer overflow in wolfCrypt CMAC (CVSS 8.2)
- [CVE-2026-5188](https://cve.now/CVE-2026-5188.md): Integer underflow in X.509 SAN parsing in wolfSSL (CVSS 2.3)
- [CVE-2026-5500](https://cve.now/CVE-2026-5500.md): Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication Bypass (CVSS 8.7)
- [CVE-2026-5501](https://cve.now/CVE-2026-5501.md): Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates (CVSS 8.6)
- [CVE-2026-5466](https://cve.now/CVE-2026-5466.md): wc\_VerifyEccsiHash missing sanity check (CVSS 7.6)
- [CVE-2026-5479](https://cve.now/CVE-2026-5479.md): wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag (CVSS 7.6)
- [CVE-2026-5460](https://cve.now/CVE-2026-5460.md): Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3 (CVSS 6.3)
- [CVE-2026-5448](https://cve.now/CVE-2026-5448.md): 1-2 Byte Buffer Overflow in wolfSSL\_X509\_notAfter/notBefore (CVSS 2.3)
- [CVE-2026-5392](https://cve.now/CVE-2026-5392.md): wolfSSL heap OOB read in PKCS7 SignedData streaming (CVSS 2.3)
- [CVE-2026-5393](https://cve.now/CVE-2026-5393.md): OOB Read in DoTls13CertificateVerify with WOLFSSL\_DUAL\_ALG\_CERTS (CVSS 6.3)
- [CVE-2026-5295](https://cve.now/CVE-2026-5295.md): Stack Buffer Overflow in wolfSSL PKCS7 wc\_PKCS7\_DecryptOri() via Oversized OID (CVSS 5.9)
- [CVE-2026-5503](https://cve.now/CVE-2026-5503.md): out-of-bounds write in TLSX\_EchChangeSNI via attacker-controlled publicName (CVSS 6.9)
- [CVE-2026-5504](https://cve.now/CVE-2026-5504.md): PKCS7 CBC Padding Oracle — Plaintext Recovery (CVSS 6.3)
- [CVE-2026-5507](https://cve.now/CVE-2026-5507.md): Session Cache Restore — Arbitrary Free via Deserialized Pointer (CVSS 4.1)
- [CVE-2026-5772](https://cve.now/CVE-2026-5772.md): MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation (CVSS 2.1)
- [CVE-2026-5778](https://cve.now/CVE-2026-5778.md): Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path. (CVSS 2.1)
- [CVE-2026-5264](https://cve.now/CVE-2026-5264.md): DTLS 1.3 ACK heap buffer overflow (CVSS 8.3)
- [CVE-2026-5263](https://cve.now/CVE-2026-5263.md): URI nameConstraints not enforced in ConfirmNameConstraints() (CVSS 7.0)
- [CVE-2026-5446](https://cve.now/CVE-2026-5446.md): wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse (CVSS 6.0)
- [CVE-2026-5447](https://cve.now/CVE-2026-5447.md): Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifier (CVSS 6.3)
- [CVE-2026-5187](https://cve.now/CVE-2026-5187.md): Heap Out-of-Bounds Write in DecodeObjectId() in wolfSSL (CVSS 2.3)
- [CVE-2026-5194](https://cve.now/CVE-2026-5194.md): wolfSSL ECDSA Certificate Verification (CVSS 9.3)
- [CVE-2026-4159](https://cve.now/CVE-2026-4159.md): wc\_PKCS7\_DecodeEnvelopedData 1 byte out-of-bounds read (CVSS 1.2)
- [CVE-2026-3230](https://cve.now/CVE-2026-3230.md): Improper key\_share validation in TLS 1.3 HelloRetryRequest (CVSS 1.2)
- [CVE-2026-4395](https://cve.now/CVE-2026-4395.md): Heap-based buffer overflow in wc\_ecc\_import\_x963\_ex KCAPI path (CVSS 1.3)
- [CVE-2026-3849](https://cve.now/CVE-2026-3849.md): Buffer Overflow in HPKE via Oversized ECH Config (CVSS 6.9)
- [CVE-2026-3547](https://cve.now/CVE-2026-3547.md): wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation (CVSS 7.5)
- [CVE-2026-3580](https://cve.now/CVE-2026-3580.md): Compiler-induced timing leak in sp\_256\_get\_entry\_256\_9 on RISC-V (CVSS 2.1)
- [CVE-2026-3579](https://cve.now/CVE-2026-3579.md): Non-constant time multiplication subroutine \_\_muldi3 on RISC-V RV32I (CVSS 2.1)
- [CVE-2026-3503](https://cve.now/CVE-2026-3503.md): Fault injection attack with ML-DSA and ML-KEM on ARM (CVSS 4.3)
- [CVE-2026-3548](https://cve.now/CVE-2026-3548.md): Buffer overflow in CRL number parsing in wolfSSL (CVSS 7.2)
- [CVE-2026-2646](https://cve.now/CVE-2026-2646.md): Heap buffer overflow in session parsing with wolfSSL\_d2i\_SSL\_SESSION() function (CVSS 5.0)
- [CVE-2026-2645](https://cve.now/CVE-2026-2645.md): Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2 (CVSS 5.5)
- [CVE-2026-1005](https://cve.now/CVE-2026-1005.md): Integer underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path (CVSS 2.1)
- [CVE-2026-0819](https://cve.now/CVE-2026-0819.md): Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes (CVSS 2.2)
- [CVE-2025-15346](https://cve.now/CVE-2025-15346.md): wolfSSL Python library \`CERT\_REQUIRED\` mode fails to enforce client certificate requirement (CVSS 9.3)
- [CVE-2025-15382](https://cve.now/CVE-2025-15382.md): Client SCP Request Triggers Buffer Overread by 1 Byte (CVSS 5.1)
- [CVE-2025-14942](https://cve.now/CVE-2025-14942.md): Authentication Bypass (CVSS 9.4)
- [CVE-2025-13912](https://cve.now/CVE-2025-13912.md): Potential non-constant time compiled code with Clang LLVM (CVSS 1.0)
- [CVE-2025-12889](https://cve.now/CVE-2025-12889.md): TLS 1.2 Client Can Downgrade Digest Used (CVSS 2.3)
- [CVE-2025-11932](https://cve.now/CVE-2025-11932.md): Timing Side-Channel in PSK Binder Verification (CVSS 2.3)
- [CVE-2025-11931](https://cve.now/CVE-2025-11931.md): Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt (CVSS 2.1)
- [CVE-2025-12888](https://cve.now/CVE-2025-12888.md): Constant Time Issue with Xtensa-based ESP32 and X22519 (CVSS 1.0)
- [CVE-2025-11936](https://cve.now/CVE-2025-11936.md): Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello (CVSS 6.3)
- [CVE-2025-11934](https://cve.now/CVE-2025-11934.md): Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify (CVSS 2.1)
- [CVE-2025-11935](https://cve.now/CVE-2025-11935.md): Forward Secrecy Violation in WolfSSL TLS 1.3 (CVSS 6.3)
- [CVE-2025-11625](https://cve.now/CVE-2025-11625.md): Host verification bypass and credential leak (CVSS 9.4)
- [CVE-2025-7844](https://cve.now/CVE-2025-7844.md): wolfTPM library wrapper function \`wolfTPM2\_RsaKey\_TpmToWolf\` copies external data to a fixed-size stack buffer without length validation potentially causing stack-based buffer overflow (CVSS 1.0)
- [CVE-2025-7396](https://cve.now/CVE-2025-7396.md): Curve25519 Blinding (CVSS 5.6)
- [CVE-2025-7394](https://cve.now/CVE-2025-7394.md): In the OpenSSL compatibility layer implementation, the function RAND\_poll() was not behaving as expected and leading to the potential for pr (CVSS 7.0)
- [CVE-2025-7395](https://cve.now/CVE-2025-7395.md): Domain Name Validation Bypass with Apple Native Certificate Validation (CVSS 9.2)
- [CVE-2024-2881](https://cve.now/CVE-2024-2881.md): Fault Injection of EdDSA signature in WolfCrypt (CVSS 6.7)
- [CVE-2024-1545](https://cve.now/CVE-2024-1545.md): Fault Injection of RSA encryption in WolfCrypt (CVSS 5.9)
- [CVE-2024-1543](https://cve.now/CVE-2024-1543.md): AES T-Table sub-cache-line leakage (CVSS 4.1)
- [CVE-2024-1544](https://cve.now/CVE-2024-1544.md): ECDSA nonce bias caused by truncation (CVSS 4.1)
- [CVE-2024-5814](https://cve.now/CVE-2024-5814.md): Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade (CVSS 5.1)
- [CVE-2024-5288](https://cve.now/CVE-2024-5288.md): Safe-error attack on TLS 1.3 Protocol (CVSS 5.1)
- [CVE-2024-5991](https://cve.now/CVE-2024-5991.md): Buffer overread in domain name matching (CVSS 10.0)
- [CVE-2024-0901](https://cve.now/CVE-2024-0901.md): SEGV and out of bounds memory read from malicious packet (CVSS 7.5)
- [CVE-2024-2873](https://cve.now/CVE-2024-2873.md): User authentication bypass in wolfSSH server (CVSS 9.1)
- [CVE-2023-6936](https://cve.now/CVE-2023-6936.md): Heap-buffer over-read with WOLFSSL\_CALLBACKS (CVSS 5.3)
- [CVE-2023-6937](https://cve.now/CVE-2023-6937.md): Improper (D)TLS key boundary enforcement (CVSS 5.3)
- [CVE-2023-6935](https://cve.now/CVE-2023-6935.md): Marvin Attack vulnerability in SP Math All RSA (CVSS 5.9)
- [CVE-2023-3724](https://cve.now/CVE-2023-3724.md): TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension (CVSS 9.1)
- [CVE-2017-13099](https://cve.now/CVE-2017-13099.md): wolfSSL Bleichenbacher/ROBOT (CVSS 7.5)
- [CVE-2017-2800](https://cve.now/CVE-2017-2800.md): A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certif (CVSS 8.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/wolfssl
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.