wolfSSL.

Heap use-after-free on read during bidirectional (D)TLS shutdown

• wolfSSL
• Memory corruption

OCSP stapling v2 multi accepts non-CA chain certificates as issuers

• wolfSSL
• Weak cryptography or TLS

NameConstraints not enforced across unconstrained intermediate CA

• wolfSSL
• Weak cryptography or TLS

Subject CN name-constraint check bypassed when non-DNS SAN present

• wolfSSL
• Weak cryptography or TLS

Failed X509_verify_cert leaves unverified CA in shared CertManager

• wolfSSL
• Weak cryptography or TLS

Client accepts unsolicited RawPublicKey server certificate type

• wolfSSL
• Authentication bypass

Trusted peer certificate match ignores public key, allowing forged CA clones

• wolfSSL
• Weak cryptography or TLS

(D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange

• wolfSSL
• CWE-696

CRL check skipped when OCSP enabled and certificate has no OCSP URL

• wolfSSL
• CWE-299

Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY

• wolfSSL
• Weak cryptography or TLS

Client session cache reference poisoning allows resumption with wrong server

• wolfSSL
• Authentication bypass

PKCS7_verify signer confusion allows forged signatures to be accepted

• wolfSSL
• Weak cryptography or TLS

iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined

• wolfSSL
• Weak cryptography or TLS

HMAC-BLAKE2 final discards message when key length exceeds block size

• wolfSSL
• CWE-354

OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status

• wolfSSL
• Weak cryptography or TLS

Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption

• wolfSSL
• Authentication bypass

TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify

• wolfSSL
• Authentication bypass

Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured

• wolfSSL
• CWE-757

Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list

• wolfSSL
• Memory corruption

PKCS#12 MAC verification uses attacker-controlled comparison length

• wolfSSL
• Weak cryptography or TLS

ML-KEM ARM64 NEON ciphertext comparison only compares half of the input

• wolfSSL
• Weak cryptography or TLS

HMAC zero-length tag forgery in EVP_DigestVerifyFinal

• wolfSSL
• Weak cryptography or TLS

Continued acceptance of SHA-1/MD5 digests in certificate processing

• wolfSSL
• Weak cryptography or TLS

CRL critical extension bypass in ParseCRL_Extensions

• wolfSSL
• Weak cryptography or TLS

Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info

• wolfSSL
• Memory corruption

DTLS 1.3 ACK serialization heap buffer overflow via integer truncation

• wolfSSL
• Memory corruption
• CWE-197

PKCS#7 decode ignores caller output buffer size, writing past buffer bounds

• wolfSSL
• Memory corruption

X.509 name constraint bypass via Subject CN treated as a DNS name

• wolfSSL
• Weak cryptography or TLS

Use-after-free in PQC hybrid key-share handling

• wolfSSL
• Memory corruption

ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recovery

• wolfSSL
• CWE-697

X25519 x86_64 assembly final reduction leaves non-canonical field element

• wolfSSL
• CWE-682

Wildcard DNS SAN bypasses CA name-constraint checks

• wolfSSL
• Weak cryptography or TLS

X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoring

• wolfSSL
• Weak cryptography or TLS

Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation

• wolfSSL
• Memory corruption

Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessage

• wolfSSL
• Memory corruption
• CWE-393

Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validation

• wolfSSL
• Weak cryptography or TLS

Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)

• wolfSSL
• Weak cryptography or TLS

X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()

• wolfSSL
• Weak cryptography or TLS

AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse

• wolfSSL
• CWE-323

wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer

• wolfSSL
• Weak cryptography or TLS

Partial-chain verification accepts untrusted intermediate as trust anchor

• wolfSSL
• Weak cryptography or TLS

Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryption

• wolfSSL
• CWE-208

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData

• wolfSSL
• Memory corruption

Prefix-substitution forgery via integer overflow in wolfCrypt CMAC

• wolfSSL
• Memory corruption

Integer underflow in X.509 SAN parsing in wolfSSL

• wolfSSL
• Memory corruption

Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication Bypass

• wolfSSL
• CWE-20

Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates

• wolfSSL
• Weak cryptography or TLS

wc_VerifyEccsiHash missing sanity check

• wolfSSL
• Weak cryptography or TLS

wolfSSL EVP ChaCha20-Poly1305 AEAD authentication tag

• wolfSSL
• CWE-354

Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3

• wolfSSL
• Memory corruption

1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore

• wolfSSL
• Memory corruption

wolfSSL heap OOB read in PKCS7 SignedData streaming

• wolfSSL
• Memory corruption

OOB Read in DoTls13CertificateVerify with WOLFSSL_DUAL_ALG_CERTS

• wolfSSL
• Memory corruption

Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID

• wolfSSL
• Memory corruption

out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName

• wolfSSL
• Memory corruption

PKCS7 CBC Padding Oracle — Plaintext Recovery

• wolfSSL
• CWE-354

Session Cache Restore — Arbitrary Free via Deserialized Pointer

• wolfSSL
• Insecure deserialization

MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation

• wolfSSL
• CWE-126

Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path.

• wolfSSL
• Memory corruption

DTLS 1.3 ACK heap buffer overflow

• wolfSSL
• Memory corruption