# wolfSSL.

Every CVE that names wolfSSL among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Heap use-after-free on read during bidirectional (D)TLS shutdown](https://agentprime.io/advisories/CVE-2026-15442.md)
  `CVE-2026-15442` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Memory corruption
- [OCSP stapling v2 multi accepts non-CA chain certificates as issuers](https://agentprime.io/advisories/CVE-2026-89102.md)
  `CVE-2026-89102` · CVE record: wolfSSL wolfSSL · CVSS 8.3 High · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS
- [NameConstraints not enforced across unconstrained intermediate CA](https://agentprime.io/advisories/CVE-2026-89133.md)
  `CVE-2026-89133` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS
- [Subject CN name-constraint check bypassed when non-DNS SAN present](https://agentprime.io/advisories/CVE-2026-89134.md)
  `CVE-2026-89134` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS
- [Failed X509_verify_cert leaves unverified CA in shared CertManager](https://agentprime.io/advisories/CVE-2026-89135.md)
  `CVE-2026-89135` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS
- [Client accepts unsolicited RawPublicKey server certificate type](https://agentprime.io/advisories/CVE-2026-89136.md)
  `CVE-2026-89136` · CVE record: wolfSSL wolfSSL · CVSS 8.3 High · Not analysed yet · Published 27 Sept 2026 · Tags: Authentication bypass
- [Trusted peer certificate match ignores public key, allowing forged CA clones](https://agentprime.io/advisories/CVE-2026-93302.md)
  `CVE-2026-93302` · CVE record: wolfSSL wolfSSL · CVSS 8.3 High · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS
- [(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange](https://agentprime.io/advisories/CVE-2026-93304.md)
  `CVE-2026-93304` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 27 Sept 2026 · Tags: CWE-696
- [CRL check skipped when OCSP enabled and certificate has no OCSP URL](https://agentprime.io/advisories/CVE-2026-94417.md)
  `CVE-2026-94417` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 27 Sept 2026 · Tags: CWE-299
- [Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY](https://agentprime.io/advisories/CVE-2026-94418.md)
  `CVE-2026-94418` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Weak cryptography or TLS
- [Client session cache reference poisoning allows resumption with wrong server](https://agentprime.io/advisories/CVE-2026-94419.md)
  `CVE-2026-94419` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 27 Sept 2026 · Tags: Authentication bypass
- [PKCS7_verify signer confusion allows forged signatures to be accepted](https://agentprime.io/advisories/CVE-2026-7511.md)
  `CVE-2026-7511` · CVE record: wolfSSL wolfSSL · CVSS 5.9 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined](https://agentprime.io/advisories/CVE-2026-7532.md)
  `CVE-2026-7532` · CVE record: wolfSSL wolfSSL · CVSS 5.7 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [HMAC-BLAKE2 final discards message when key length exceeds block size](https://agentprime.io/advisories/CVE-2026-8720.md)
  `CVE-2026-8720` · CVE record: wolfSSL wolfSSL · CVSS 5.9 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-354
- [OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status](https://agentprime.io/advisories/CVE-2026-10098.md)
  `CVE-2026-10098` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption](https://agentprime.io/advisories/CVE-2026-11703.md)
  `CVE-2026-11703` · CVE record: wolfSSL wolfSSL · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Authentication bypass
- [TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify](https://agentprime.io/advisories/CVE-2026-55962.md)
  `CVE-2026-55962` · CVE record: wolfSSL wolfSSL · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Authentication bypass
- [Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured](https://agentprime.io/advisories/CVE-2026-6092.md)
  `CVE-2026-6092` · CVE record: wolfSSL wolfSSL · CVSS 2.1 Low · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-757
- [Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list](https://agentprime.io/advisories/CVE-2026-6325.md)
  `CVE-2026-6325` · CVE record: wolfSSL wolfSSL · CVSS 2.0 Low · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [PKCS#12 MAC verification uses attacker-controlled comparison length](https://agentprime.io/advisories/CVE-2026-6329.md)
  `CVE-2026-6329` · CVE record: wolfSSL wolfSSL · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [ML-KEM ARM64 NEON ciphertext comparison only compares half of the input](https://agentprime.io/advisories/CVE-2026-6330.md)
  `CVE-2026-6330` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [HMAC zero-length tag forgery in EVP_DigestVerifyFinal](https://agentprime.io/advisories/CVE-2026-6331.md)
  `CVE-2026-6331` · CVE record: wolfSSL wolfSSL · CVSS 2.1 Low · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [Continued acceptance of SHA-1/MD5 digests in certificate processing](https://agentprime.io/advisories/CVE-2026-6412.md)
  `CVE-2026-6412` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [CRL critical extension bypass in ParseCRL_Extensions](https://agentprime.io/advisories/CVE-2026-6450.md)
  `CVE-2026-6450` · CVE record: wolfSSL wolfSSL · CVSS 1.0 Low · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info](https://agentprime.io/advisories/CVE-2026-6678.md)
  `CVE-2026-6678` · CVE record: wolfSSL wolfSSL · CVSS 1.0 Low · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [DTLS 1.3 ACK serialization heap buffer overflow via integer truncation](https://agentprime.io/advisories/CVE-2026-6679.md)
  `CVE-2026-6679` · CVE record: wolfSSL wolfSSL · CVSS 8.8 High · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption, CWE-197
- [PKCS#7 decode ignores caller output buffer size, writing past buffer bounds](https://agentprime.io/advisories/CVE-2026-6681.md)
  `CVE-2026-6681` · CVE record: wolfSSL wolfSSL · CVSS 1.0 Low · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [X.509 name constraint bypass via Subject CN treated as a DNS name](https://agentprime.io/advisories/CVE-2026-6731.md)
  `CVE-2026-6731` · CVE record: wolfSSL wolfSSL · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [Use-after-free in PQC hybrid key-share handling](https://agentprime.io/advisories/CVE-2026-7531.md)
  `CVE-2026-7531` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery](https://agentprime.io/advisories/CVE-2026-10097.md)
  `CVE-2026-10097` · CVE record: wolfSSL wolfSSL · CVSS 8.3 High · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-697
- [X25519 x86_64 assembly final reduction leaves non-canonical field element](https://agentprime.io/advisories/CVE-2026-10512.md)
  `CVE-2026-10512` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-682
- [Wildcard DNS SAN bypasses CA name-constraint checks](https://agentprime.io/advisories/CVE-2026-10592.md)
  `CVE-2026-10592` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring](https://agentprime.io/advisories/CVE-2026-11310.md)
  `CVE-2026-11310` · CVE record: wolfSSL wolfSSL · CVSS 8.7 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation](https://agentprime.io/advisories/CVE-2026-12340.md)
  `CVE-2026-12340` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage](https://agentprime.io/advisories/CVE-2026-55958.md)
  `CVE-2026-55958` · CVE record: wolfSSL wolfSSL · CVSS 8.3 High · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption, CWE-393
- [Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation](https://agentprime.io/advisories/CVE-2026-55960.md)
  `CVE-2026-55960` · CVE record: wolfSSL wolfSSL · CVSS 8.2 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)](https://agentprime.io/advisories/CVE-2026-55964.md)
  `CVE-2026-55964` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()](https://agentprime.io/advisories/CVE-2026-11999.md)
  `CVE-2026-11999` · CVE record: wolfSSL wolfSSL · CVSS 8.2 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse](https://agentprime.io/advisories/CVE-2026-55967.md)
  `CVE-2026-55967` · CVE record: wolfSSL wolfSSL · CVSS 2.0 Low · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-323
- [wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer](https://agentprime.io/advisories/CVE-2026-55961.md)
  `CVE-2026-55961` · CVE record: wolfSSL wolfSSL · CVSS 8.2 High · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [Partial-chain verification accepts untrusted intermediate as trust anchor](https://agentprime.io/advisories/CVE-2026-6091.md)
  `CVE-2026-6091` · CVE record: wolfSSL wolfSSL · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Weak cryptography or TLS
- [Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption](https://agentprime.io/advisories/CVE-2026-6291.md)
  `CVE-2026-6291` · CVE record: wolfSSL wolfSSL · CVSS 6.0 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-208
- [Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData](https://agentprime.io/advisories/CVE-2026-6094.md)
  `CVE-2026-6094` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Memory corruption
- [Prefix-substitution forgery via integer overflow in wolfCrypt CMAC](https://agentprime.io/advisories/CVE-2026-5477.md)
  `CVE-2026-5477` · CVE record: wolfSSL wolfSSL · CVSS 8.2 High · Not analysed yet · Published 10 Apr 2026 · Tags: Memory corruption
- [Integer underflow in X.509 SAN parsing in wolfSSL](https://agentprime.io/advisories/CVE-2026-5188.md)
  `CVE-2026-5188` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 10 Apr 2026 · Tags: Memory corruption
- [Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication Bypass](https://agentprime.io/advisories/CVE-2026-5500.md)
  `CVE-2026-5500` · CVE record: wolfSSL wolfSSL · CVSS 8.7 High · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-20
- [Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates](https://agentprime.io/advisories/CVE-2026-5501.md)
  `CVE-2026-5501` · CVE record: wolfSSL wolfSSL · CVSS 8.6 High · Not analysed yet · Published 10 Apr 2026 · Tags: Weak cryptography or TLS
- [wc_VerifyEccsiHash missing sanity check](https://agentprime.io/advisories/CVE-2026-5466.md)
  `CVE-2026-5466` · CVE record: wolfSSL wolfSSL · CVSS 7.6 High · Not analysed yet · Published 10 Apr 2026 · Tags: Weak cryptography or TLS
- [wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag](https://agentprime.io/advisories/CVE-2026-5479.md)
  `CVE-2026-5479` · CVE record: wolfSSL wolfSSL · CVSS 7.6 High · Not analysed yet · Published 10 Apr 2026 · Tags: CWE-354
- [Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3](https://agentprime.io/advisories/CVE-2026-5460.md)
  `CVE-2026-5460` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption
- [1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore](https://agentprime.io/advisories/CVE-2026-5448.md)
  `CVE-2026-5448` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption
- [wolfSSL heap OOB read in PKCS7 SignedData streaming](https://agentprime.io/advisories/CVE-2026-5392.md)
  `CVE-2026-5392` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption
- [OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS](https://agentprime.io/advisories/CVE-2026-5393.md)
  `CVE-2026-5393` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption
- [Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID](https://agentprime.io/advisories/CVE-2026-5295.md)
  `CVE-2026-5295` · CVE record: wolfSSL wolfSSL · CVSS 5.9 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption
- [out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName](https://agentprime.io/advisories/CVE-2026-5503.md)
  `CVE-2026-5503` · CVE record: wolfSSL wolfSSL · CVSS 6.9 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption
- [PKCS7 CBC Padding Oracle — Plaintext Recovery](https://agentprime.io/advisories/CVE-2026-5504.md)
  `CVE-2026-5504` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-354
- [Session Cache Restore — Arbitrary Free via Deserialized Pointer](https://agentprime.io/advisories/CVE-2026-5507.md)
  `CVE-2026-5507` · CVE record: wolfSSL wolfSSL · CVSS 4.1 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Insecure deserialization
- [MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation](https://agentprime.io/advisories/CVE-2026-5772.md)
  `CVE-2026-5772` · CVE record: wolfSSL wolfSSL · CVSS 2.1 Low · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-126
- [Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.](https://agentprime.io/advisories/CVE-2026-5778.md)
  `CVE-2026-5778` · CVE record: wolfSSL wolfSSL · CVSS 2.1 Low · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption
- [DTLS 1.3 ACK heap buffer overflow](https://agentprime.io/advisories/CVE-2026-5264.md)
  `CVE-2026-5264` · CVE record: wolfSSL wolfSSL · CVSS 8.3 High · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption

Older: <https://agentprime.io/advisories/technology/wolfssl.md?cursor=WyIyMDI2LTA0LTA5VDIxOjQzOjEyLjQ3OTAwMFoiLCJDVkUtMjAyNi01MjY0Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=wolfssl>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/wolfssl/>. Everything for agents: <https://agentprime.io/llms.txt>.