TI-2026-03607 CVE-2026-4159 · GHSA-m9r6-9wmx-24jv
wc_PKCS7_DecodeEnvelopedData 1 byte out-of-bounds read
Priority LOW 6
1-byte OOB heap read in wc_PKCS7_DecodeEnvelopedData via zero-length encrypted content.
Vulnerabilities
7 records
TI-2026-02793 CVE-2026-3230 · GHSA-g3xr-5f55-cf5g
Improper key_share validation in TLS 1.3 HelloRetryRequest
Priority LOW 7
Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protected communications via a crafted HelloRetryRequest fol…
TI-2026-03057 CVE-2026-3547 · GHSA-f377-557w-vjgv
wolfSSL: out-of-bounds read (DoS) in ALPN parsing due to incomplete validation
Priority LOW 39
Out-of-bounds read in ALPN parsing due to incomplete validation.
TI-2026-03087 CVE-2026-3580 · GHSA-wm74-pvww-q7h2
Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V
Priority LOW 10
In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into conditional branches (bnez) by GCC when targeting RISC-V RV32I with -O3.
TI-2026-03086 CVE-2026-3579 · GHSA-f5x4-gf23-wqm9
Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I
Priority LOW 11
wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication.
TI-2026-03058 CVE-2026-3548 · GHSA-86fv-q5vx-mw5m
Buffer overflow in CRL number parsing in wolfSSL
Priority MEDIUM 40
Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap-based buffer overflow could occur when improperly storing the CRL number as a hexadecimal string, and a stack-based o…
TI-2026-00601 CVE-2026-0819 · GHSA-3cr6-hpf3-2hmg
Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes
Priority LOW 12
A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality.