Vulnerabilidades en wolfSSL
106 resultadosCVE-2026-5507MEDIUMSession Cache Restore — Arbitrary Free via Deserialized PointerEPSS 0.2%CVE-2026-89134MEDIUMSubject CN name-constraint check bypassed when non-DNS SAN presentEPSS 0.2%CVE-2026-0930LOWPotential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal ResizeEPSS 0.2%CVE-2026-6330MEDIUMML-KEM ARM64 NEON ciphertext comparison only compares half of the inputEPSS 0.2%CVE-2026-94417LOWCRL check skipped when OCSP enabled and certificate has no OCSP URLEPSS 0.2%CVE-2026-5392LOWwolfSSL heap OOB read in PKCS7 SignedData streamingEPSS 0.2%CVE-2025-11934LOWImproper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerifyEPSS 0.2%CVE-2026-8720MEDIUMHMAC-BLAKE2 final discards message when key length exceeds block sizeEPSS 0.2%CVE-2026-93304MEDIUM(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchangeEPSS 0.2%CVE-2025-13912LOWPotential non-constant time compiled code with Clang LLVMEPSS 0.1%CVE-2026-55961HIGHwolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signerEPSS 0.1%CVE-2025-12889LOWTLS 1.2 Client Can Downgrade Digest UsedEPSS 0.1%CVE-2026-3580LOWCompiler-induced timing leak in sp_256_get_entry_256_9 on RISC-VEPSS 0.1%CVE-2026-5188LOWInteger underflow in X.509 SAN parsing in wolfSSLEPSS 0.1%CVE-2026-2645MEDIUMAcceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2EPSS 0.1%CVE-2026-2646MEDIUMHeap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() functionEPSS 0.1%CVE-2026-89102HIGHOCSP stapling v2 multi accepts non-CA chain certificates as issuersEPSS 0.1%CVE-2026-89133MEDIUMNameConstraints not enforced across unconstrained intermediate CAEPSS 0.1%CVE-2026-6731MEDIUMX.509 name constraint bypass via Subject CN treated as a DNS nameEPSS 0.1%CVE-2026-5504MEDIUMPKCS7 CBC Padding Oracle — Plaintext RecoveryEPSS 0.1%