Wolfssl vulnerabilities
118 CVEs and advisories name Wolfssl as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-6412Continued acceptance of SHA-1/MD5 digests in certificate processing
- CVE-2026-6450CRL critical extension bypass in ParseCRL_Extensions
- CVE-2026-6678Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info
- CVE-2026-6679DTLS 1.3 ACK serialization heap buffer overflow via integer truncation
- CVE-2026-6681PKCS#7 decode ignores caller output buffer size, writing past buffer bounds
- CVE-2026-6731X.509 name constraint bypass via Subject CN treated as a DNS name
- CVE-2026-7531Use-after-free in PQC hybrid key-share handling
- CVE-2026-10097ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery
- CVE-2026-10512X25519 x86_64 assembly final reduction leaves non-canonical field element
- CVE-2026-10592Wildcard DNS SAN bypasses CA name-constraint checks
- CVE-2026-11310X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring
- CVE-2026-12340Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation
- CVE-2026-55958Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage
- CVE-2026-55960Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation
- CVE-2026-55964Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)
- CVE-2026-11999X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()
- CVE-2026-55967AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse
- CVE-2026-55961wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer
- CVE-2026-6091Partial-chain verification accepts untrusted intermediate as trust anchor
- CVE-2026-6291Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption
- CVE-2026-6094Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData
- CVE-2026-0930Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize
- CVE-2026-5477Prefix-substitution forgery via integer overflow in wolfCrypt CMAC
- CVE-2026-5188Integer underflow in X.509 SAN parsing in wolfSSL
- CVE-2026-5500Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication Bypass
- CVE-2026-5501Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates
- CVE-2026-5466wc_VerifyEccsiHash missing sanity check
- CVE-2026-5479wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag
- CVE-2026-5460Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3
- CVE-2026-54481-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore