CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 12:50 UTC)

What this means for you

This week: 5,502 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,502; Show in the list
Critical, last 7 days: 360; Show in the list
Healthcare-tagged, last 7 days: 5; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product wolfssl:wolfssl. Show all products

88 CVEs, showing 51 to 88PreviousPage 2 of 2

CVE	Severity	Title	Published
CVE-2026-5448	Medium 4.3	X.509 date buffer overflow in wolfSSL_X509_notAfter / wolfSSL_X509_notBefore.	Apr 10, 2026
CVE-2026-5393	Critical 9.1	Dual-Algorithm CertificateVerify out-of-bounds read.	Apr 10, 2026
CVE-2026-5392	Medium 5.4	Heap out-of-bounds read in PKCS7 parsing.	Apr 10, 2026
CVE-2026-5507	Medium 4.0	When restoring a session from cache, a pointer from the serialized session data is used in a free operation without validation.	Apr 9, 2026
CVE-2026-5504	Medium 5.3	A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext.	Apr 9, 2026
CVE-2026-5503	Critical 9.1	In TLSX_EchChangeSNI, the ctx->extensions branch set extensions unconditionally even when TLSX_Find returned NULL.	Apr 9, 2026
CVE-2026-5295	High 8.0	A stack buffer overflow exists in wolfSSL's PKCS7 implementation in the wc_PKCS7_DecryptOri() function in wolfcrypt/src/pkcs7.c.	Apr 9, 2026
CVE-2026-5778	Medium 6.5	Integer underflow in wolfSSL packet sniffer <= 5.9.0 allows an attacker to cause a program crash in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authentication…	Apr 9, 2026
CVE-2026-5772	Medium 5.3	A 1-byte stack buffer over-read was identified in the MatchDomainName function (src/internal.c) during wildcard hostname validation when the LEFT_MOST_WILDCARD_ONLY flag is active.	Apr 9, 2026
CVE-2026-5264	Critical 9.8	Heap buffer overflow in DTLS 1.3 ACK message processing.	Apr 9, 2026
CVE-2026-5263	Medium 6.5	URI nameConstraints from constrained intermediate CAs are parsed but not enforced during certificate chain verification in wolfcrypt/src/asn.c.	Apr 9, 2026
CVE-2026-5447	High 7.5	Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion.	Apr 9, 2026
CVE-2026-5446	High 7.1	In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record.	Apr 9, 2026
CVE-2026-5194	Critical 9.1	Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature ver…	Apr 9, 2026
CVE-2026-5187	Critical 9.8	Two potential heap out-of-bounds write locations existed in DecodeObjectId() in wolfcrypt/src/asn.c.	Apr 9, 2026
CVE-2026-4159	Low 3.3	1-byte OOB heap read in wc_PKCS7_DecodeEnvelopedData via zero-length encrypted content.	Mar 19, 2026
CVE-2026-4395	Critical 9.8	Heap-based buffer overflow in the KCAPI ECC code path of wc_ecc_import_x963_ex() in wolfSSL wolfcrypt allows a remote attacker to write attacker-controlled data past the bounds of the pubkey_raw buff…	Mar 19, 2026
CVE-2026-3849	Critical 9.8	Stack Buffer Overflow in wc_HpkeLabeledExtract via Oversized ECH Config.	Mar 19, 2026
CVE-2026-3549	Critical 9.8	Heap Overflow in TLS 1.3 ECH parsing.	Mar 19, 2026
CVE-2026-3547	High 7.5	Out-of-bounds read in ALPN parsing due to incomplete validation.	Mar 19, 2026
CVE-2026-3230	Low 2.7	Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protected communications via a crafted…	Mar 19, 2026
CVE-2026-3229	Medium 5.5	An integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certifica…	Mar 19, 2026
CVE-2026-3580	Medium 4.7	In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into conditional branches (bnez) by GCC when targeting RISC-V RV32I with -O3.	Mar 19, 2026
CVE-2026-3579	Medium 5.9	wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication.	Mar 19, 2026
CVE-2026-3503	Medium 5.2	Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key material and/or cry…	Mar 19, 2026
CVE-2026-3548	Critical 9.8	Two buffer overflow vulnerabilities existed in the wolfSSL CRL parser when parsing CRL numbers: a heap-based buffer overflow could occur when improperly storing the CRL number as a hexadecimal string…	Mar 19, 2026
CVE-2026-2646	High 8.1	A heap-buffer-overflow vulnerability exists in wolfSSL's wolfSSL_d2i_SSL_SESSION() function.	Mar 19, 2026
CVE-2026-2645	High 7.5	In wolfSSL 5.8.2 and earlier, a logic flaw existed in the TLS 1.2 server state machine implementation.	Mar 19, 2026
CVE-2026-1005	Medium 5.3	Integer underflow in wolfSSL packet sniffer <= 5.8.4 allows an attacker to cause a buffer overflow in the AEAD decryption path by injecting a TLS record shorter than the explicit IV plus authenticati…	Mar 19, 2026
CVE-2026-0819	High 7.1	A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality.	Mar 19, 2026
CVE-2025-12889	Medium 5.4	With TLS 1.2 connections a client can use any digest, specifically a weaker digest that is supported, rather than those in the CertificateRequest.	Nov 22, 2025
CVE-2025-12888	High 7.5	Vulnerability in X25519 constant-time cryptographic implementations due to timing side channels introduced by compiler optimizations and CPU architecture limitations, specifically with the Xtensa-bas…	Nov 21, 2025
CVE-2025-11936	Medium 5.3	Improper input validation in the TLS 1.3 KeyShareEntry parsing in wolfSSL v5.8.2 on multiple platforms allows a remote unauthenticated attacker to cause a denial-of-service by sending a crafted Clien…	Nov 21, 2025
CVE-2025-11934	Low 2.7	Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used.	Nov 21, 2025
CVE-2025-11933	Medium 6.5	Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via…	Nov 21, 2025
CVE-2025-11932	Medium 4.3	The server previously verified the TLS 1.3 PSK binder using a non-constant time method which could potentially leak information about the PSK binder	Nov 21, 2025
CVE-2025-11931	High 8.2	Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt.	Nov 21, 2025
CVE-2025-11935	High 7.5	With TLS 1.3 pre-shared key (PSK) a malicious or faulty server could ignore the request for PFS (perfect forward secrecy) and the client would continue on with the connection using PSK without PFS.	Nov 21, 2025

PreviousPage 2 of 2

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.