Vulnerabilities in wolfSSL
94 resultsCVE-2025-13912LOWPotential non-constant time compiled code with Clang LLVMEPSS 0.1%CVE-2026-2646MEDIUMHeap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() functionEPSS 0.1%CVE-2026-5448LOW1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBeforeEPSS 0.1%CVE-2026-6325LOWOut-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms listEPSS 0.1%CVE-2026-7511MEDIUMPKCS7_verify signer confusion allows forged signatures to be acceptedEPSS 0.1%CVE-2026-5504MEDIUMPKCS7 CBC Padding Oracle — Plaintext RecoveryEPSS 0.1%CVE-2026-0819LOWStack buffer overflow in PKCS7 SignedData encoding with custom signed attributesEPSS 0.1%CVE-2026-6412LOWContinued acceptance of SHA-1/MD5 digests in certificate processingEPSS 0.1%CVE-2026-6331LOWHMAC zero-length tag forgery in EVP_DigestVerifyFinalEPSS 0.1%CVE-2026-6678LOWInteger underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient InfoEPSS 0.1%CVE-2026-4159LOWwc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds readEPSS 0.1%CVE-2026-7532MEDIUMiPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefinedEPSS 0.1%CVE-2026-8720MEDIUMHMAC-BLAKE2 final discards message when key length exceeds block sizeEPSS 0.1%CVE-2026-55967LOWAES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuseEPSS 0.1%