Wolfssl vulnerabilities
118 CVEs and advisories name Wolfssl as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-13912Potential non-constant time compiled code with Clang LLVM
- CVE-2025-12889TLS 1.2 Client Can Downgrade Digest Used
- CVE-2025-11932Timing Side-Channel in PSK Binder Verification
- CVE-2025-11931Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt
- CVE-2025-12888Constant Time Issue with Xtensa-based ESP32 and X22519
- CVE-2025-11936Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello
- CVE-2025-11934Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify
- CVE-2025-11935Forward Secrecy Violation in WolfSSL TLS 1.3
- CVE-2025-11625Host verification bypass and credential leak
- CVE-2025-7844wolfTPM library wrapper function `wolfTPM2_RsaKey_TpmToWolf` copies external data to a fixed-size stack buffer without length validation potentially causing stack-based buffer overflow
- CVE-2025-7396Curve25519 Blinding
- CVE-2025-7394In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for pr
- CVE-2025-7395Domain Name Validation Bypass with Apple Native Certificate Validation
- CVE-2024-2881Fault Injection of EdDSA signature in WolfCrypt
- CVE-2024-1545Fault Injection of RSA encryption in WolfCrypt
- CVE-2024-1543AES T-Table sub-cache-line leakage
- CVE-2024-1544ECDSA nonce bias caused by truncation
- CVE-2024-5814Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade
- CVE-2024-5288Safe-error attack on TLS 1.3 Protocol
- CVE-2024-5991Buffer overread in domain name matching
- CVE-2024-0901SEGV and out of bounds memory read from malicious packet
- CVE-2024-2873User authentication bypass in wolfSSH server
- CVE-2023-6936 Heap-buffer over-read with WOLFSSL_CALLBACKS
- CVE-2023-6937Improper (D)TLS key boundary enforcement
- CVE-2023-6935Marvin Attack vulnerability in SP Math All RSA
- CVE-2023-3724TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension
- CVE-2017-13099wolfSSL Bleichenbacher/ROBOT
- CVE-2017-2800A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certif