wolfSSL.

URI nameConstraints not enforced in ConfirmNameConstraints()

• wolfSSL
• Weak cryptography or TLS

wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse

• wolfSSL
• CWE-323

Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifier

• wolfSSL
• Memory corruption

Heap Out-of-Bounds Write in DecodeObjectId() in wolfSSL

• wolfSSL
• Memory corruption

wolfSSL ECDSA Certificate Verification

• wolfSSL
• Weak cryptography or TLS

wc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read

• wolfSSL
• Memory corruption

Improper key_share validation in TLS 1.3 HelloRetryRequest

• wolfSSL
• CWE-20

Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path

• wolfssl
• Memory corruption

Buffer Overflow in HPKE via Oversized ECH Config

• wolfSSL
• Memory corruption

wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation

• wolfSSL
• Memory corruption

Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V

• wolfSSL
• Information disclosure

Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I

• wolfSSL
• Information disclosure

Buffer overflow in CRL number parsing in wolfSSL

• wolfSSL
• Memory corruption

Heap buffer overflow in session parsing with wolfSSL_d2i_SSL_SESSION() function

• wolfssl
• Memory corruption

Acceptance of CertificateVerify Message before ClientKeyExchange in TLS 1.2

• wolfSSL
• CWE-358

Integer underflow leads to out-of-bounds access in sniffer AES-GCM/CCM/ARIA-GCM decrypt path

• wolfSSL
• Memory corruption

Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes

• wolfSSL
• Memory corruption

Potential non-constant time compiled code with Clang LLVM

• wolfSSL
• Information disclosure

TLS 1.2 Client Can Downgrade Digest Used

• wolfSSL
• CWE-20

Timing Side-Channel in PSK Binder Verification

• wolfSSL
• Information disclosure

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt

• wolfSSL
• Memory corruption

Constant Time Issue with Xtensa-based ESP32 and X22519

• wolfSSL
• Information disclosure

Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello

• wolfSSL
• CWE-20

Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify

• wolfSSL
• CWE-20

Forward Secrecy Violation in WolfSSL TLS 1.3

• wolfSSL
• Weak cryptography or TLS

Curve25519 Blinding

• wolfSSL
• CWE-385

Information disclosure in wolfSSL

• wolfSSL
• Information disclosure

Domain Name Validation Bypass with Apple Native Certificate Validation

• wolfSSL
• Weak cryptography or TLS

AES T-Table sub-cache-line leakage

• wolfSSL
• CWE-208

ECDSA nonce bias caused by truncation

• wolfSSL
• Information disclosure

Unverifed Ciphersuite used on a client-side TLS1.3 Downgrade

• wolfSSL
• Broken access control

Safe-error attack on TLS 1.3 Protocol

• wolfSSL
• Information disclosure

Buffer overread in domain name matching

• wolfSSL
• Memory corruption

SEGV and out of bounds memory read from malicious packet

• wolfSSL
• CWE-129

Heap-buffer over-read with WOLFSSL_CALLBACKS

• wolfSSL
• CWE-126

Improper (D)TLS key boundary enforcement

• wolfSSL
• CWE-20

Marvin Attack vulnerability in SP Math All RSA

• wolfSSL
• Information disclosure

TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension

• wolfSSL
• CWE-20

Information disclosure in wolfssl

• wolfssl
• Information disclosure

wolfSSL Bleichenbacher/ROBOT

• wolfSSL
• Information disclosure

wolfSSL: A specially crafted x509 certificate can cause a single out of bounds byte overwrite in…

• wolfSSL