Vulnerabilities in wolfssl
106 resultsCVE-2026-11310HIGHX.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoringEPSS 0.2%CVE-2026-5778LOWInteger underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.EPSS 0.2%CVE-2025-11935MEDIUMForward Secrecy Violation in WolfSSL TLS 1.3EPSS 0.2%CVE-2026-3230LOWImproper key_share validation in TLS 1.3 HelloRetryRequestEPSS 0.2%CVE-2026-5460MEDIUMHeap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3EPSS 0.2%CVE-2025-7396MEDIUMCurve25519 BlindingEPSS 0.2%CVE-2026-6329MEDIUMPKCS#12 MAC verification uses attacker-controlled comparison lengthEPSS 0.2%CVE-2026-15442LOWHeap use-after-free on read during bidirectional (D)TLS shutdownEPSS 0.2%CVE-2026-5393MEDIUMOOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTSEPSS 0.2%CVE-2026-10592MEDIUMWildcard DNS SAN bypasses CA name-constraint checksEPSS 0.2%CVE-2026-5479HIGHwolfSSL EVP ChaCha20-Poly1305 AEAD authentication tagEPSS 0.2%CVE-2026-6091MEDIUMPartial-chain verification accepts untrusted intermediate as trust anchorEPSS 0.2%CVE-2026-10098MEDIUMOCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_statusEPSS 0.2%CVE-2026-55964MEDIUMChain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)EPSS 0.2%CVE-2026-6331LOWHMAC zero-length tag forgery in EVP_DigestVerifyFinalEPSS 0.2%CVE-2026-5466HIGHwc_VerifyEccsiHash missing sanity checkEPSS 0.2%CVE-2024-1543MEDIUMAES T-Table sub-cache-line leakageEPSS 0.2%CVE-2026-5295MEDIUMStack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OIDEPSS 0.2%CVE-2026-55967LOWAES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuseEPSS 0.2%CVE-2026-5263HIGHURI nameConstraints not enforced in ConfirmNameConstraints()EPSS 0.2%