wolfSSL Inc. vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20251
3. 20269

Newest CVEs

• CVE-2026-84897

  wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion

  wolfSSL Inc. · wolfSSH

  Medium6.9
• CVE-2026-83742

  wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms

  wolfSSL Inc. · wolfSSH

  Medium5.3
• CVE-2026-81535

  wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check

  wolfSSL Inc. · wolfSSH

  Medium6.3
• CVE-2026-16516

  wolfSSH ECDSA host key curve not validated against negotiated algorithm

  wolfSSL Inc. · wolfSSH

  Critical9.0
• CVE-2026-81341

  wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

  wolfSSL Inc. · wolfEngine

  Medium6.5
• CVE-2026-81020

  wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

  wolfSSL Inc. · wolfEngine

  High7.4
• CVE-2026-81019

  wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

  wolfSSL Inc. · wolfProvider

  High7.4
• CVE-2026-3849

  Buffer Overflow in HPKE via Oversized ECH Config

  wolfSSL Inc. · wolfSSL

  Medium6.9
• CVE-2026-3503

  Fault injection attack with ML-DSA and ML-KEM on ARM

  wolfSSL Inc. · wolfSSL (wolfCrypt)

  Medium4.3
• CVE-2025-7844

  wolfTPM library wrapper function `wolfTPM2_RsaKey_TpmToWolf` copies external data to a fixed-size stack buffer without length validation potentially causing stack-based buffer overflow

  wolfSSL Inc. · wolfTPM

  Low1.0