Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the…

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the…

If a TLS 1.3 client gets neither a PSK (pre shared key) extension nor a KSE (key share extension) when connecting to a malicious server, a default predictable buffer gets used for…

Client accepts unsolicited RawPublicKey server certificate type

Trusted peer certificate match ignores public key, allowing forged CA clones

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt

Integer underflow in X.509 SAN parsing in wolfSSL

Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates

wc_VerifyEccsiHash missing sanity check

wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag

Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function

DoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain anomalous peer behavior (sending an ED22519, ED448, ECC, or RSA signature without…

Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID

wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a malformed temporary DH file

Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY

PKCS7_verify signer confusion allows forged signatures to be accepted

iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined

HMAC-BLAKE2 final discards message when key length exceeds block size

Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption

Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list

HMAC zero-length tag forgery in EVP_DigestVerifyFinal

DTLS 1.3 ACK serialization heap buffer overflow via integer truncation

X.509 name constraint bypass via Subject CN treated as a DNS name

ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery

X25519 x86_64 assembly final reduction leaves non-canonical field element

X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring

Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation

Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage

Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation

X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()

AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse

wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer

Prefix-substitution forgery via integer overflow in wolfCrypt CMAC

Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifier

wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation

Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2

Constant Time Issue with Xtensa-based ESP32 and X22519

Forward Secrecy Violation in WolfSSL TLS 1.3

In function MatchDomainName(), input param str is treated as a NULL terminated string despite being user provided and unchecked

In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3 handshake

An issue was discovered in wolfSSL before 5.5.0

wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped

In wolfSSL before 5.2.0, a TLS 1.3 server cannot properly enforce a requirement for mutual authentication

An issue was discovered in wolfSSL before 4.5.0

wolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side-channel attacks

wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography

wolfssl before 3.2.0 has a server certificate that is not properly authorized for server authentication

wolfssl before 3.2.0 does not properly authorize CA certificate for signing other certificates

wolfssl before 3.2.0 does not properly issue certificates for a server's hostname

In wolfSSL 4.1.0 through 4.2.0c, there are missing sanity checks of memory accesses in parsing ASN.1 certificate data while handshaking