agentprime: wolfssl

agentprime: wolfsslEvery new CVE for wolfssl.https://agentprime.io/CVE-2026-15442: Heap use-after-free on read during bidirectional (D)TLS shutdownhttps://agentprime.io/advisories/CVE-2026-15442/https://agentprime.io/advisories/CVE-2026-15442/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 09:24:31 GMTCVECVE-2026-89102: OCSP stapling v2 multi accepts non-CA chain certificates as issuershttps://agentprime.io/advisories/CVE-2026-89102/https://agentprime.io/advisories/CVE-2026-89102/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 09:22:42 GMTCVECVE-2026-89133: NameConstraints not enforced across unconstrained intermediate CAhttps://agentprime.io/advisories/CVE-2026-89133/https://agentprime.io/advisories/CVE-2026-89133/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 09:18:43 GMTCVECVE-2026-89134: Subject CN name-constraint check bypassed when non-DNS SAN presenthttps://agentprime.io/advisories/CVE-2026-89134/https://agentprime.io/advisories/CVE-2026-89134/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 09:16:58 GMTCVECVE-2026-89135: Failed X509_verify_cert leaves unverified CA in shared CertManagerhttps://agentprime.io/advisories/CVE-2026-89135/https://agentprime.io/advisories/CVE-2026-89135/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 09:14:44 GMTCVECVE-2026-89136: Client accepts unsolicited RawPublicKey server certificate typehttps://agentprime.io/advisories/CVE-2026-89136/https://agentprime.io/advisories/CVE-2026-89136/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 09:12:39 GMTCVECVE-2026-93302: Trusted peer certificate match ignores public key, allowing forged CA cloneshttps://agentprime.io/advisories/CVE-2026-93302/https://agentprime.io/advisories/CVE-2026-93302/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 09:07:35 GMTCVECVE-2026-93304: (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchangehttps://agentprime.io/advisories/CVE-2026-93304/https://agentprime.io/advisories/CVE-2026-93304/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 09:05:37 GMTCVECVE-2026-94417: CRL check skipped when OCSP enabled and certificate has no OCSP URLhttps://agentprime.io/advisories/CVE-2026-94417/https://agentprime.io/advisories/CVE-2026-94417/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 09:00:59 GMTCVECVE-2026-94418: Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFYhttps://agentprime.io/advisories/CVE-2026-94418/https://agentprime.io/advisories/CVE-2026-94418/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 08:58:56 GMTCVECVE-2026-94419: Client session cache reference poisoning allows resumption with wrong serverhttps://agentprime.io/advisories/CVE-2026-94419/https://agentprime.io/advisories/CVE-2026-94419/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 08:54:18 GMTCVECVE-2026-7511: PKCS7_verify signer confusion allows forged signatures to be acceptedhttps://agentprime.io/advisories/CVE-2026-7511/https://agentprime.io/advisories/CVE-2026-7511/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 21:32:29 GMTCVECVE-2026-7532: iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefinedhttps://agentprime.io/advisories/CVE-2026-7532/https://agentprime.io/advisories/CVE-2026-7532/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 21:31:11 GMTCVECVE-2026-8720: HMAC-BLAKE2 final discards message when key length exceeds block sizehttps://agentprime.io/advisories/CVE-2026-8720/https://agentprime.io/advisories/CVE-2026-8720/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 21:18:29 GMTCVECVE-2026-10098: OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_statushttps://agentprime.io/advisories/CVE-2026-10098/https://agentprime.io/advisories/CVE-2026-10098/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 21:16:45 GMTCVECVE-2026-11703: Missing SNI/ALPN binding on stateful (session-ID) TLS session resumptionhttps://agentprime.io/advisories/CVE-2026-11703/https://agentprime.io/advisories/CVE-2026-11703/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 21:15:20 GMTCVECVE-2026-55962: TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerifyhttps://agentprime.io/advisories/CVE-2026-55962/https://agentprime.io/advisories/CVE-2026-55962/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 21:12:38 GMTCVECVE-2026-6092: Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configuredhttps://agentprime.io/advisories/CVE-2026-6092/https://agentprime.io/advisories/CVE-2026-6092/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 21:06:20 GMTCVECVE-2026-6325: Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms listhttps://agentprime.io/advisories/CVE-2026-6325/https://agentprime.io/advisories/CVE-2026-6325/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 21:04:31 GMTCVECVE-2026-6329: PKCS#12 MAC verification uses attacker-controlled comparison lengthhttps://agentprime.io/advisories/CVE-2026-6329/https://agentprime.io/advisories/CVE-2026-6329/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 21:02:45 GMTCVECVE-2026-6330: ML-KEM ARM64 NEON ciphertext comparison only compares half of the inputhttps://agentprime.io/advisories/CVE-2026-6330/https://agentprime.io/advisories/CVE-2026-6330/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 21:01:19 GMTCVECVE-2026-6331: HMAC zero-length tag forgery in EVP_DigestVerifyFinalhttps://agentprime.io/advisories/CVE-2026-6331/https://agentprime.io/advisories/CVE-2026-6331/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 20:56:25 GMTCVECVE-2026-6412: Continued acceptance of SHA-1/MD5 digests in certificate processinghttps://agentprime.io/advisories/CVE-2026-6412/https://agentprime.io/advisories/CVE-2026-6412/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 20:38:29 GMTCVECVE-2026-6450: CRL critical extension bypass in ParseCRL_Extensionshttps://agentprime.io/advisories/CVE-2026-6450/https://agentprime.io/advisories/CVE-2026-6450/CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 20:18:53 GMTCVECVE-2026-6678: Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Infohttps://agentprime.io/advisories/CVE-2026-6678/https://agentprime.io/advisories/CVE-2026-6678/CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 20:16:08 GMTCVECVE-2026-6679: DTLS 1.3 ACK serialization heap buffer overflow via integer truncationhttps://agentprime.io/advisories/CVE-2026-6679/https://agentprime.io/advisories/CVE-2026-6679/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 20:13:06 GMTCVECVE-2026-6681: PKCS#7 decode ignores caller output buffer size, writing past buffer boundshttps://agentprime.io/advisories/CVE-2026-6681/https://agentprime.io/advisories/CVE-2026-6681/CVSS 1.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 20:11:39 GMTCVECVE-2026-6731: X.509 name constraint bypass via Subject CN treated as a DNS namehttps://agentprime.io/advisories/CVE-2026-6731/https://agentprime.io/advisories/CVE-2026-6731/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 20:08:13 GMTCVECVE-2026-7531: Use-after-free in PQC hybrid key-share handlinghttps://agentprime.io/advisories/CVE-2026-7531/https://agentprime.io/advisories/CVE-2026-7531/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 20:01:16 GMTCVECVE-2026-10097: ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recoveryhttps://agentprime.io/advisories/CVE-2026-10097/https://agentprime.io/advisories/CVE-2026-10097/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 19:59:30 GMTCVECVE-2026-10512: X25519 x86_64 assembly final reduction leaves non-canonical field elementhttps://agentprime.io/advisories/CVE-2026-10512/https://agentprime.io/advisories/CVE-2026-10512/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 19:58:16 GMTCVECVE-2026-10592: Wildcard DNS SAN bypasses CA name-constraint checkshttps://agentprime.io/advisories/CVE-2026-10592/https://agentprime.io/advisories/CVE-2026-10592/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 19:40:11 GMTCVECVE-2026-11310: X.509 trust-chain bypass in wolfSSL_X509_verify_cert() via untrusted intermediate anchoringhttps://agentprime.io/advisories/CVE-2026-11310/https://agentprime.io/advisories/CVE-2026-11310/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 19:38:19 GMTCVECVE-2026-12340: Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computationhttps://agentprime.io/advisories/CVE-2026-12340/https://agentprime.io/advisories/CVE-2026-12340/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 19:36:21 GMTCVECVE-2026-55958: Renesas TSIP TLS 1.3 transcript buffer out-of-bounds write in tsip_StoreMessagehttps://agentprime.io/advisories/CVE-2026-55958/https://agentprime.io/advisories/CVE-2026-55958/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 19:35:21 GMTCVECVE-2026-55960: Un-negotiated Raw Public Key (RFC 7250) accepted in place of X.509, bypassing chain validationhttps://agentprime.io/advisories/CVE-2026-55960/https://agentprime.io/advisories/CVE-2026-55960/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 19:31:55 GMTCVECVE-2026-55964: Chain intermediate CA:TRUE without keyCertSign accepted as a signing CA (temporary CA exemption)https://agentprime.io/advisories/CVE-2026-55964/https://agentprime.io/advisories/CVE-2026-55964/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 19:30:34 GMTCVECVE-2026-11999: X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()https://agentprime.io/advisories/CVE-2026-11999/https://agentprime.io/advisories/CVE-2026-11999/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 16:56:14 GMTCVECVE-2026-55967: AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reusehttps://agentprime.io/advisories/CVE-2026-55967/https://agentprime.io/advisories/CVE-2026-55967/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 16:53:14 GMTCVECVE-2026-55961: wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signerhttps://agentprime.io/advisories/CVE-2026-55961/https://agentprime.io/advisories/CVE-2026-55961/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 16:51:18 GMTCVECVE-2026-6091: Partial-chain verification accepts untrusted intermediate as trust anchorhttps://agentprime.io/advisories/CVE-2026-6091/https://agentprime.io/advisories/CVE-2026-6091/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 16:46:12 GMTCVECVE-2026-6291: Bleichenbacher padding oracle in PKCS#7 KTRI RSA PKCS#1 v1.5 decryptionhttps://agentprime.io/advisories/CVE-2026-6291/https://agentprime.io/advisories/CVE-2026-6291/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 16:41:42 GMTCVECVE-2026-6094: Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedDatahttps://agentprime.io/advisories/CVE-2026-6094/https://agentprime.io/advisories/CVE-2026-6094/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jun 2026 16:35:48 GMTCVECVE-2026-5477: Prefix-substitution forgery via integer overflow in wolfCrypt CMAChttps://agentprime.io/advisories/CVE-2026-5477/https://agentprime.io/advisories/CVE-2026-5477/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 05:06:22 GMTCVECVE-2026-5188: Integer underflow in X.509 SAN parsing in wolfSSLhttps://agentprime.io/advisories/CVE-2026-5188/https://agentprime.io/advisories/CVE-2026-5188/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 03:24:21 GMTCVECVE-2026-5500: Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication Bypasshttps://agentprime.io/advisories/CVE-2026-5500/https://agentprime.io/advisories/CVE-2026-5500/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 03:10:25 GMTCVECVE-2026-5501: Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificateshttps://agentprime.io/advisories/CVE-2026-5501/https://agentprime.io/advisories/CVE-2026-5501/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 03:07:39 GMTCVECVE-2026-5466: wc_VerifyEccsiHash missing sanity checkhttps://agentprime.io/advisories/CVE-2026-5466/https://agentprime.io/advisories/CVE-2026-5466/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 03:00:42 GMTCVECVE-2026-5479: wolfSSL EVP ChaCha20-Poly1305 AEAD authentication taghttps://agentprime.io/advisories/CVE-2026-5479/https://agentprime.io/advisories/CVE-2026-5479/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 02:38:39 GMTCVECVE-2026-5460: Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3https://agentprime.io/advisories/CVE-2026-5460/https://agentprime.io/advisories/CVE-2026-5460/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Apr 2026 23:29:27 GMTCVE