WO
Vendor
wolfssl
165
CVEs
0
On KEV
1
New 30D
Products
WO8.8
wolfSSH
wolfSSL
2 CVEs0 on KEV1 new
WO9.8
wolfssl
wolfssl
152 CVEs0 on KEV0 new
WO5.5
Wolfmqtt
Wolfssl
7 CVEs0 on KEV0 new
WO7.4
Wolfengine
Wolfssl
2 CVEs0 on KEV0 new
WO7.4
Wolfprovider
Wolfssl
1 CVEs0 on KEV0 new
YA–
Yassl
Wolfssl
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-83540 | WO wolfSSH wolfSSL | 8.8 | Oct 7 | wolfSSHd on Windows race condition leading to logon token reused across connections |
| CVE-2026-15442 | WO wolfSSL wolfSSL | 5.3 | Sep 27 | Heap use-after-free on read during bidirectional (D)TLS shutdown |
| CVE-2026-89102 | WO wolfSSL wolfSSL | 6.5 | Sep 27 | OCSP stapling v2 multi accepts non-CA chain certificates as issuers |
| CVE-2026-89133 | WO wolfSSL wolfSSL | 5.3 | Sep 27 | NameConstraints not enforced across unconstrained intermediate CA |
| CVE-2026-89134 | WO wolfSSL wolfSSL | 9.1 | Sep 27 | Subject CN name-constraint check bypassed when non-DNS SAN present |
| CVE-2026-89135 | WO wolfSSL wolfSSL | 6.5 | Sep 27 | Failed X509_verify_cert leaves unverified CA in shared CertManager |
| CVE-2026-89136 | WO wolfSSL wolfSSL | 8.3 | Sep 27 | Client accepts unsolicited RawPublicKey server certificate type |
| CVE-2026-93302 | WO wolfSSL wolfSSL | 8.2 | Sep 27 | Trusted peer certificate match ignores public key, allowing forged CA clones |
| CVE-2026-93304 | WO wolfSSL wolfSSL | 3.7 | Sep 27 | (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange |
| CVE-2026-94417 | WO wolfSSL wolfSSL | 5.3 | Sep 27 | CRL check skipped when OCSP enabled and certificate has no OCSP URL |
| CVE-2026-94418 | WO wolfSSL wolfSSL | 7.5 | Sep 27 | Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY |
| CVE-2026-94419 | WO wolfSSL wolfSSL | 5.4 | Sep 27 | Client session cache reference poisoning allows resumption with wrong server |
| CVE-2026-81341 | WO Wolfengine Wolfssl | 6.5 | Aug 28 | wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records |
| CVE-2026-81020 | WO Wolfengine Wolfssl | 7.4 | Aug 28 | wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record |
| CVE-2026-81019 | WO Wolfprovider Wolfssl | 7.4 | Aug 28 | wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record |
| CVE-2026-7511 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | PKCS7_verify signer confusion allows forged signatures to be accepted |
| CVE-2026-7532 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined |
| CVE-2026-8720 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | HMAC-BLAKE2 final discards message when key length exceeds block size |
| CVE-2026-10098 | WO wolfSSL wolfSSL | 5.3 | Jun 25 | OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status |
| CVE-2026-11703 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption |
| CVE-2026-55962 | WO wolfSSL wolfSSL | 6.5 | Jun 25 | TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify |
| CVE-2026-6092 | WO wolfSSL wolfSSL | 5.3 | Jun 25 | Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured |
| CVE-2026-6325 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list |
| CVE-2026-6329 | WO wolfSSL wolfSSL | 6.5 | Jun 25 | PKCS#12 MAC verification uses attacker-controlled comparison length |
| CVE-2026-6330 | WO wolfSSL wolfSSL | 6.5 | Jun 25 | ML-KEM ARM64 NEON ciphertext comparison only compares half of the input |
| CVE-2026-6331 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | HMAC zero-length tag forgery in EVP_DigestVerifyFinal |
| CVE-2026-6412 | WO wolfSSL wolfSSL | 4.3 | Jun 25 | Continued acceptance of SHA-1/MD5 digests in certificate processing |
| CVE-2026-6450 | WO wolfSSL wolfSSL | 5.3 | Jun 25 | CRL critical extension bypass in ParseCRL_Extensions |
| CVE-2026-6678 | WO wolfSSL wolfSSL | 5.3 | Jun 25 | Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info |
| CVE-2026-6679 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | DTLS 1.3 ACK serialization heap buffer overflow via integer truncation |
| CVE-2026-6681 | WO wolfSSL wolfSSL | 5.3 | Jun 25 | PKCS#7 decode ignores caller output buffer size, writing past buffer bounds |
| CVE-2026-6731 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | X.509 name constraint bypass via Subject CN treated as a DNS name |
| CVE-2026-7531 | WO wolfSSL wolfSSL | 9.8 | Jun 25 | Use-after-free in PQC hybrid key-share handling |
| CVE-2026-10097 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery |
| CVE-2026-10512 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | X25519 x86_64 assembly final reduction leaves non-canonical field element |
| CVE-2026-10592 | WO wolfSSL wolfSSL | 5.3 | Jun 25 | Wildcard DNS SAN bypasses CA name-constraint checks |
| CVE-2026-11310 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring |
| CVE-2026-12340 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation |
| CVE-2026-55958 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage |
| CVE-2026-55960 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation |
| CVE-2026-55964 | WO wolfSSL wolfSSL | 5.3 | Jun 25 | Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption) |
| CVE-2026-11999 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert() |
| CVE-2026-55967 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse |
| CVE-2026-55961 | WO wolfSSL wolfSSL | 7.5 | Jun 25 | wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer |
| CVE-2026-6091 | WO wolfSSL wolfSSL | 6.5 | Jun 25 | Partial-chain verification accepts untrusted intermediate as trust anchor |
| CVE-2026-6291 | WO wolfSSL wolfSSL | 6.5 | Jun 25 | Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption |
| CVE-2026-6094 | WO wolfSSL wolfSSL | 9.1 | Jun 25 | Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData |
| CVE-2026-0930 | WO wolfSSH wolfSSL | 4.3 | Apr 20 | Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize |
| CVE-2026-5477 | WO wolfSSL wolfSSL | 7.5 | Apr 10 | Prefix-substitution forgery via integer overflow in wolfCrypt CMAC |
| CVE-2026-5188 | WO wolfSSL wolfSSL | 8.1 | Apr 10 | Integer underflow in X.509 SAN parsing in wolfSSL |
| CVE-2026-5500 | WO wolfSSL wolfSSL | 5.9 | Apr 10 | Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication Bypass |
| CVE-2026-5501 | WO wolfSSL wolfSSL | 8.1 | Apr 10 | Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates |
| CVE-2026-5466 | WO wolfSSL wolfSSL | 8.1 | Apr 10 | wc_VerifyEccsiHash missing sanity check |
| CVE-2026-5479 | WO wolfSSL wolfSSL | 8.1 | Apr 10 | wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag |
| CVE-2026-5460 | WO wolfSSL wolfSSL | 6.5 | Apr 9 | Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3 |
| CVE-2026-5448 | WO wolfSSL wolfSSL | 4.3 | Apr 9 | 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore |
| CVE-2026-5392 | WO wolfSSL wolfSSL | 5.4 | Apr 9 | wolfSSL heap OOB read in PKCS7 SignedData streaming |
| CVE-2026-5393 | WO wolfSSL wolfSSL | 9.1 | Apr 9 | OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS |
| CVE-2026-5295 | WO wolfSSL wolfSSL | 8.0 | Apr 9 | Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID |
| CVE-2026-5503 | WO wolfSSL wolfSSL | 9.1 | Apr 9 | out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName |