Wolfssl
144 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Wolfssl, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
Wolfssl CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 3 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 8 |
| 2025-12 | 1 |
| 2026-01 | 1 |
| 2026-02 | 0 |
| 2026-03 | 15 |
| 2026-04 | 22 |
| 2026-05 | 0 |
| 2026-06 | 32 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 144 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical25
- High51
- Medium62
- Low3
Latest CVEs
The 15 most recently published vulnerabilities affecting Wolfssl.
- CVE-2026-7511PKCS7_verify signer confusion allows forged signatures to be accepted7.5
- CVE-2026-7532iPAddress name constraints not enforced when WOLFSSL_IP_ALT_NAME is undefined7.5
- CVE-2026-8720HMAC-BLAKE2 final discards message when key length exceeds block size7.5
- CVE-2026-10098OCSP CertID serial-number length-confusion in wolfSSL_OCSP_resp_find_status5.3
- CVE-2026-11703Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption7.5
- CVE-2026-55962TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify6.5
- CVE-2026-6092Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured5.3
- CVE-2026-6325Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list7.5
- CVE-2026-6329PKCS#12 MAC verification uses attacker-controlled comparison length6.5
- CVE-2026-6330ML-KEM ARM64 NEON ciphertext comparison only compares half of the input6.5
- CVE-2026-6331HMAC zero-length tag forgery in EVP_DigestVerifyFinal7.5
- CVE-2026-6412Continued acceptance of SHA-1/MD5 digests in certificate processing4.3
- CVE-2026-6450CRL critical extension bypass in ParseCRL_Extensions5.3
- CVE-2026-6678Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info5.3
- CVE-2026-6679DTLS 1.3 ACK serialization heap buffer overflow via integer truncation7.5
Product grouping is registry-driven, with AI assist and human review. How it works