Vulnerabilities in wolfSSL Inc.
12 resultsCVE-2024-2873CRITICALUser authentication bypass in wolfSSH serverEPSS 0.6%CVE-2026-84897MEDIUMwolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusionEPSS 0.5%CVE-2026-3849MEDIUMBuffer Overflow in HPKE via Oversized ECH ConfigEPSS 0.5%CVE-2026-83742MEDIUMwstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platformsEPSS 0.4%CVE-2024-5288MEDIUMSafe-error attack on TLS 1.3 ProtocolEPSS 0.4%CVE-2026-81020HIGHwolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 recordEPSS 0.4%CVE-2026-81019HIGHwolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 recordEPSS 0.4%CVE-2026-81341MEDIUMwolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 recordsEPSS 0.3%CVE-2026-81535MEDIUMwolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization checkEPSS 0.3%CVE-2026-16516CRITICALwolfSSH ECDSA host key curve not validated against negotiated algorithmEPSS 0.2%CVE-2025-7844LOWwolfTPM library wrapper function `wolfTPM2_RsaKey_TpmToWolf` copies external data to a fixed-size stack buffer without length validation potentially causing stack-based buffer overflowEPSS 0.2%CVE-2026-3503MEDIUMFault injection attack with ML-DSA and ML-KEM on ARMEPSS 0.2%