Vulnerabilidades en wolfSSL
106 resultadosCVE-2025-11936MEDIUMPotential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHelloEPSS 0.5%CVE-2026-5264HIGHDTLS 1.3 ACK heap buffer overflowEPSS 0.5%CVE-2026-10512LOWX25519 x86_64 assembly final reduction leaves non-canonical field elementEPSS 0.5%CVE-2026-55958HIGHRenesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessageEPSS 0.4%CVE-2025-11625CRITICALHost verification bypass and credential leakEPSS 0.4%CVE-2025-14942CRITICALAuthentication BypassEPSS 0.4%CVE-2026-6092LOWEncrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configuredEPSS 0.4%CVE-2026-89136HIGHClient accepts unsolicited RawPublicKey server certificate typeEPSS 0.4%CVE-2026-5477HIGHPrefix-substitution forgery via integer overflow in wolfCrypt CMACEPSS 0.4%CVE-2026-6681LOWPKCS#7 decode ignores caller output buffer size, writing past buffer boundsEPSS 0.4%CVE-2026-11703MEDIUMMissing SNI/ALPN binding on stateful (session-ID) TLS session resumptionEPSS 0.4%CVE-2026-4395LOWHeap-based buffer overflow in wc_ecc_import_x963_ex KCAPI pathEPSS 0.4%CVE-2026-5447MEDIUMHeap buffer overflow in CertFromX509() via AuthorityKeyIdentifierEPSS 0.4%CVE-2025-15382MEDIUMClient SCP Request Triggers Buffer Overread by 1 ByteEPSS 0.4%CVE-2024-1544MEDIUMECDSA nonce bias caused by truncationEPSS 0.3%CVE-2026-5446MEDIUMwolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuseEPSS 0.3%CVE-2025-11931LOWInteger Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 DecryptEPSS 0.3%CVE-2025-15346CRITICALwolfSSL Python library `CERT_REQUIRED` mode fails to enforce client certificate requirementEPSS 0.3%CVE-2026-6678LOWInteger underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient InfoEPSS 0.3%CVE-2026-6450LOWCRL critical extension bypass in ParseCRL_ExtensionsEPSS 0.3%