Use-after-free in PQC hybrid key-share handling

DTLS 1.3 ACK heap buffer overflow

Heap Out-of-Bounds Write in DecodeObjectId() in wolfSSL

Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path

Buffer Overflow in HPKE via Oversized ECH Config

ECH parsing heap buffer overflow

Buffer overflow in CRL number parsing in wolfSSL

In the OpenSSL compatibility layer implementation, the function RAND_poll() was not behaving as expected and leading to the potential for predictable values returned from…

wolfSSL 4.6.x through 4.7.x before 4.8.0 does not produce a failure outcome when the serial number in an OCSP request differs from the serial number in the OCSP response

RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size

wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact via multiple calls to the CyaSSL_read function which triggers an out-of-bounds read when an error…

The SSL 3 HMAC functionality in wolfSSL CyaSSL 2.5.0 before 2.9.4 does not check the padding length when verification fails, which allows remote attackers to have unspecified…

The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified impact and vectors, which trigger…

In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking

wolfSSL 4.1.0 has a one-byte heap-based buffer over-read in DecodeCertExtensions in wolfcrypt/src/asn.c because reading the ASN_BOOLEAN byte is mishandled for a crafted DER…

wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity size is greater than a client identity size

examples/benchmark/tls_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow

A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resulting in potential certificate validation vulnerabilities,…

Subject CN name-constraint check bypassed when non-DNS SAN present

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData

OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS

out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName

wolfSSL ECDSA Certificate Verification

Remotely executed SEGV and out of bounds read allows malicious packet sender to crash or cause an out of bounds read via sending a malformed packet with the correct length

In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on…

In wolfSSL before 5.5.2, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS 1.3 client or network attacker can trigger a buffer over-read on…

wolfSSL 5.x before 5.1.1 uses non-random IV values in certain situations

Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the…

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the…

If a TLS 1.3 client gets neither a PSK (pre shared key) extension nor a KSE (key share extension) when connecting to a malicious server, a default predictable buffer gets used for…

Client accepts unsolicited RawPublicKey server certificate type

Trusted peer certificate match ignores public key, allowing forged CA clones

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt

Integer underflow in X.509 SAN parsing in wolfSSL

Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates

wc_VerifyEccsiHash missing sanity check

wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag

Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function

DoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain anomalous peer behavior (sending an ED22519, ED448, ECC, or RSA signature without…

Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID

wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a malformed temporary DH file

Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY

PKCS7_verify signer confusion allows forged signatures to be accepted

iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined

HMAC-BLAKE2 final discards message when key length exceeds block size

Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption

Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list

HMAC zero-length tag forgery in EVP_DigestVerifyFinal

DTLS 1.3 ACK serialization heap buffer overflow via integer truncation

X.509 name constraint bypass via Subject CN treated as a DNS name