Vulnerabilities

A heap use-after-free exists in wolfSSL's TLS 1.3 post-quantum cryptography (PQC) hybrid KeyShare processing.

X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore.

Heap out-of-bounds read in PKCS7 parsing.

Dual-Algorithm CertificateVerify out-of-bounds read.

A stack buffer overflow exists in wolfSSL's PKCS7 implementation in the wc_PKCS7_DecryptOri() function in wolfcrypt/src/pkcs7.c.

Heap buffer overflow in DTLS 1.3 ACK message processing.

URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c.

In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record.

Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion.

Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature verification functions.