WO
Product
wolfssl
153
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 27High 55Medium 66Low 5
Watch
Add wolfssl to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-8855 | 7.5 | May 9 | wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key Affected: through 3.10.4 |
| CVE-2015-6925 | 7.5 | Jan 22 | wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or traffic amplification) via a crafted DTLS cookie in a… Affected: through 3.6.6 |
| CVE-2026-5446 | 7.1 | Apr 9 | wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse Affected: 5.2.1 before 5.9.1 |
| CVE-2026-0819 | 7.1 | Mar 19 | Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes Affected: 5.5.0 before 5.9.0 |
| CVE-2020-15309 | 7.0 | Aug 21 | An issue was discovered in wolfSSL before 4.5.0, when single precision is not employed Affected: before 4.5.0 |