Wolfssl vulnerabilities
118 CVEs and advisories name Wolfssl as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-5392wolfSSL heap OOB read in PKCS7 SignedData streaming
- CVE-2026-5393OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS
- CVE-2026-5295Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID
- CVE-2026-5503out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName
- CVE-2026-5504PKCS7 CBC Padding Oracle — Plaintext Recovery
- CVE-2026-5507Session Cache Restore — Arbitrary Free via Deserialized Pointer
- CVE-2026-5772MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation
- CVE-2026-5778Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.
- CVE-2026-5264DTLS 1.3 ACK heap buffer overflow
- CVE-2026-5263URI nameConstraints not enforced in ConfirmNameConstraints()
- CVE-2026-5446wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse
- CVE-2026-5447Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifier
- CVE-2026-5187Heap Out-of-Bounds Write in DecodeObjectId() in wolfSSL
- CVE-2026-5194wolfSSL ECDSA Certificate Verification
- CVE-2026-4159wc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read
- CVE-2026-3230Improper key_share validation in TLS 1.3 HelloRetryRequest
- CVE-2026-4395Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path
- CVE-2026-3849Buffer Overflow in HPKE via Oversized ECH Config
- CVE-2026-3547wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation
- CVE-2026-3580Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V
- CVE-2026-3579Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I
- CVE-2026-3503Fault injection attack with ML-DSA and ML-KEM on ARM
- CVE-2026-3548Buffer overflow in CRL number parsing in wolfSSL
- CVE-2026-2646Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function
- CVE-2026-2645Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2
- CVE-2026-1005Integer underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path
- CVE-2026-0819Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes
- CVE-2025-15346wolfSSL Python library `CERT_REQUIRED` mode fails to enforce client certificate requirement
- CVE-2025-15382Client SCP Request Triggers Buffer Overread by 1 Byte
- CVE-2025-14942Authentication Bypass