# wolfSSL.

Every CVE that names wolfSSL among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [URI nameConstraints not enforced in ConfirmNameConstraints()](https://agentprime.io/advisories/CVE-2026-5263.md)
  `CVE-2026-5263` · CVE record: wolfSSL wolfSSL · CVSS 7.0 High · Not analysed yet · Published 9 Apr 2026 · Tags: Weak cryptography or TLS
- [wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse](https://agentprime.io/advisories/CVE-2026-5446.md)
  `CVE-2026-5446` · CVE record: wolfSSL wolfSSL · CVSS 6.0 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: CWE-323
- [Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifier](https://agentprime.io/advisories/CVE-2026-5447.md)
  `CVE-2026-5447` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption
- [Heap Out-of-Bounds Write in DecodeObjectId() in wolfSSL](https://agentprime.io/advisories/CVE-2026-5187.md)
  `CVE-2026-5187` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 9 Apr 2026 · Tags: Memory corruption
- [wolfSSL ECDSA Certificate Verification](https://agentprime.io/advisories/CVE-2026-5194.md)
  `CVE-2026-5194` · CVE record: wolfSSL wolfSSL · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Apr 2026 · Tags: Weak cryptography or TLS
- [wc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read](https://agentprime.io/advisories/CVE-2026-4159.md)
  `CVE-2026-4159` · CVE record: wolfSSL wolfSSL · CVSS 1.2 Low · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption
- [Improper key_share validation in TLS 1.3 HelloRetryRequest](https://agentprime.io/advisories/CVE-2026-3230.md)
  `CVE-2026-3230` · CVE record: wolfSSL wolfSSL · CVSS 1.2 Low · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-20
- [Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path](https://agentprime.io/advisories/CVE-2026-4395.md)
  `CVE-2026-4395` · CVE record: wolfSSL wolfssl · CVSS 1.3 Low · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption
- [Buffer Overflow in HPKE via Oversized ECH Config](https://agentprime.io/advisories/CVE-2026-3849.md)
  `CVE-2026-3849` · CVE record: wolfSSL Inc. wolfSSL · CVSS 6.9 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption
- [wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation](https://agentprime.io/advisories/CVE-2026-3547.md)
  `CVE-2026-3547` · CVE record: wolfSSL wolfSSL · CVSS 7.5 High · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption
- [Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V](https://agentprime.io/advisories/CVE-2026-3580.md)
  `CVE-2026-3580` · CVE record: wolfSSL wolfSSL · CVSS 2.1 Low · Not analysed yet · Published 19 Mar 2026 · Tags: Information disclosure
- [Non-constant time multiplication subroutine \_\_muldi3 on RISC-V RV32I](https://agentprime.io/advisories/CVE-2026-3579.md)
  `CVE-2026-3579` · CVE record: wolfSSL wolfSSL · CVSS 2.1 Low · Not analysed yet · Published 19 Mar 2026 · Tags: Information disclosure
- [Buffer overflow in CRL number parsing in wolfSSL](https://agentprime.io/advisories/CVE-2026-3548.md)
  `CVE-2026-3548` · CVE record: wolfSSL wolfSSL · CVSS 7.2 High · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption
- [Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function](https://agentprime.io/advisories/CVE-2026-2646.md)
  `CVE-2026-2646` · CVE record: wolfssl wolfssl · CVSS 5.0 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption
- [Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2](https://agentprime.io/advisories/CVE-2026-2645.md)
  `CVE-2026-2645` · CVE record: wolfSSL wolfSSL · CVSS 5.5 Medium · Not analysed yet · Published 19 Mar 2026 · Tags: CWE-358
- [Integer underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path](https://agentprime.io/advisories/CVE-2026-1005.md)
  `CVE-2026-1005` · CVE record: wolfSSL wolfSSL · CVSS 2.1 Low · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption
- [Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes](https://agentprime.io/advisories/CVE-2026-0819.md)
  `CVE-2026-0819` · CVE record: wolfSSL wolfSSL · CVSS 2.2 Low · Not analysed yet · Published 19 Mar 2026 · Tags: Memory corruption
- [Potential non-constant time compiled code with Clang LLVM](https://agentprime.io/advisories/CVE-2025-13912.md)
  `CVE-2025-13912` · CVE record: wolfSSL wolfSSL · CVSS 1.0 Low · Not analysed yet · Published 11 Dec 2025 · Tags: Information disclosure
- [TLS 1.2 Client Can Downgrade Digest Used](https://agentprime.io/advisories/CVE-2025-12889.md)
  `CVE-2025-12889` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 21 Nov 2025 · Tags: CWE-20
- [Timing Side-Channel in PSK Binder Verification](https://agentprime.io/advisories/CVE-2025-11932.md)
  `CVE-2025-11932` · CVE record: wolfSSL wolfSSL · CVSS 2.3 Low · Not analysed yet · Published 21 Nov 2025 · Tags: Information disclosure
- [Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt](https://agentprime.io/advisories/CVE-2025-11931.md)
  `CVE-2025-11931` · CVE record: wolfSSL wolfSSL · CVSS 2.1 Low · Not analysed yet · Published 21 Nov 2025 · Tags: Memory corruption
- [Constant Time Issue with Xtensa-based ESP32 and X22519](https://agentprime.io/advisories/CVE-2025-12888.md)
  `CVE-2025-12888` · CVE record: wolfSSL wolfSSL · CVSS 1.0 Low · Not analysed yet · Published 21 Nov 2025 · Tags: Information disclosure
- [Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello](https://agentprime.io/advisories/CVE-2025-11936.md)
  `CVE-2025-11936` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 21 Nov 2025 · Tags: CWE-20
- [Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify](https://agentprime.io/advisories/CVE-2025-11934.md)
  `CVE-2025-11934` · CVE record: wolfSSL wolfSSL · CVSS 2.1 Low · Not analysed yet · Published 21 Nov 2025 · Tags: CWE-20
- [Forward Secrecy Violation in WolfSSL TLS 1.3](https://agentprime.io/advisories/CVE-2025-11935.md)
  `CVE-2025-11935` · CVE record: wolfSSL wolfSSL · CVSS 6.3 Medium · Not analysed yet · Published 21 Nov 2025 · Tags: Weak cryptography or TLS
- [Curve25519 Blinding](https://agentprime.io/advisories/CVE-2025-7396.md)
  `CVE-2025-7396` · CVE record: wolfSSL wolfSSL · CVSS 5.6 Medium · Not analysed yet · Published 18 Jul 2025 · Tags: CWE-385
- [Information disclosure in wolfSSL](https://agentprime.io/advisories/CVE-2025-7394.md)
  `CVE-2025-7394` · CVE record: wolfSSL wolfSSL · CVSS 7.0 High · Not analysed yet · Published 18 Jul 2025 · Tags: Information disclosure
- [Domain Name Validation Bypass with Apple Native Certificate Validation](https://agentprime.io/advisories/CVE-2025-7395.md)
  `CVE-2025-7395` · CVE record: wolfSSL wolfSSL · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Jul 2025 · Tags: Weak cryptography or TLS
- [AES T-Table sub-cache-line leakage](https://agentprime.io/advisories/CVE-2024-1543.md)
  `CVE-2024-1543` · CVE record: wolfSSL wolfSSL · CVSS 4.1 Medium · Not analysed yet · Published 29 Aug 2024 · Tags: CWE-208
- [ECDSA nonce bias caused by truncation](https://agentprime.io/advisories/CVE-2024-1544.md)
  `CVE-2024-1544` · CVE record: wolfSSL wolfSSL · CVSS 4.1 Medium · Not analysed yet · Published 27 Aug 2024 · Tags: Information disclosure
- [Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade](https://agentprime.io/advisories/CVE-2024-5814.md)
  `CVE-2024-5814` · CVE record: wolfSSL wolfSSL · CVSS 5.1 Medium · Not analysed yet · Published 27 Aug 2024 · Tags: Broken access control
- [Safe-error attack on TLS 1.3 Protocol](https://agentprime.io/advisories/CVE-2024-5288.md)
  `CVE-2024-5288` · CVE record: wolfSSL Inc. wolfSSL · CVSS 5.1 Medium · Not analysed yet · Published 27 Aug 2024 · Tags: Information disclosure
- [Buffer overread in domain name matching](https://agentprime.io/advisories/CVE-2024-5991.md)
  `CVE-2024-5991` · CVE record: wolfSSL wolfSSL · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2024 · Tags: Memory corruption
- [SEGV and out of bounds memory read from malicious packet](https://agentprime.io/advisories/CVE-2024-0901.md)
  `CVE-2024-0901` · CVE record: wolfSSL wolfSSL · CVSS 7.5 High · Not analysed yet · Published 25 Mar 2024 · Tags: CWE-129
- [Heap-buffer over-read with WOLFSSL_CALLBACKS](https://agentprime.io/advisories/CVE-2023-6936.md)
  `CVE-2023-6936` · CVE record: wolfSSL wolfSSL · CVSS 5.3 Medium · Not analysed yet · Published 20 Feb 2024 · Tags: CWE-126
- [Improper (D)TLS key boundary enforcement](https://agentprime.io/advisories/CVE-2023-6937.md)
  `CVE-2023-6937` · CVE record: wolfSSL wolfSSL · CVSS 5.3 Medium · Not analysed yet · Published 15 Feb 2024 · Tags: CWE-20
- [Marvin Attack vulnerability in SP Math All RSA](https://agentprime.io/advisories/CVE-2023-6935.md)
  `CVE-2023-6935` · CVE record: wolfSSL wolfSSL · CVSS 5.9 Medium · Not analysed yet · Published 9 Feb 2024 · Tags: Information disclosure
- [TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension](https://agentprime.io/advisories/CVE-2023-3724.md)
  `CVE-2023-3724` · CVE record: wolfSSL wolfSSL · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jul 2023 · Tags: CWE-20
- [Information disclosure in wolfssl](https://agentprime.io/advisories/CVE-2018-16870.md)
  `CVE-2018-16870` · CVE record: wolfssl · No CVSS score · Not analysed yet · Published 3 Jan 2019 · Tags: Information disclosure
- [wolfSSL Bleichenbacher/ROBOT](https://agentprime.io/advisories/CVE-2017-13099.md)
  `CVE-2017-13099` · CVE record: wolfSSL wolfSSL · CVSS 7.5 High · Critical (CVSS 7+ and EPSS) · EPSS 0.27 · Not analysed yet · Published 13 Dec 2017 · Tags: Information disclosure
- [wolfSSL: A specially crafted x509 certificate can cause a single out of bounds byte overwrite in…](https://agentprime.io/advisories/CVE-2017-2800.md)
  `CVE-2017-2800` · CVE record: wolfSSL wolfSSL · CVSS 8.1 High · Not analysed yet · Published 24 May 2017

Newest: <https://agentprime.io/advisories/technology/wolfssl.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=wolfssl&cursor=WyIyMDI2LTA0LTA5VDIxOjQzOjEyLjQ3OTAwMFoiLCJDVkUtMjAyNi01MjY0Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/wolfssl/?cursor=WyIyMDI2LTA0LTA5VDIxOjQzOjEyLjQ3OTAwMFoiLCJDVkUtMjAyNi01MjY0Il0>. Everything for agents: <https://agentprime.io/llms.txt>.