Approved changes feed: RSS · Atom

cpe:2.3:a:wolfssl:wolfssl:5.6.6:*:*:*:*:*:*:*

part: a version: 5.6.6 update: *

VendorWolfssl (c89e4e4f-7da7-5f15-8e26-95faf62010c7)
ProductWolfssl (414ba146-de95-562a-aa94-820c6e63c09e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libwolfssl-dev purl2cpe 2026-06-01 10:16:40.790271
pkg:deb/ubuntu/libwolfssl-dev purl2cpe 2026-06-01 10:16:40.790272
pkg:github/wolfssl/wolfssl purl2cpe 2026-06-01 10:16:40.790273
pkg:rpm/opensuse/wolfssl purl2cpe 2026-06-01 10:16:40.790275
pkg:wolfssl/wolfssl purl2cpe 2026-06-01 10:16:40.790276

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2881 vulnerable 2026-06-08 06:35:27.596784 Fault Injection of EdDSA signature in WolfCrypt
MEDIUM (6.7)
Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure.
Published: 2024-08-29T23:10:59.179Z
Updated: 2024-08-30T14:18:36.327Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1545 vulnerable 2026-06-08 06:27:13.335741 Fault Injection of RSA encryption in WolfCrypt
MEDIUM (5.9)
Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.
Published: 2024-08-29T23:02:48.312Z
Updated: 2026-01-27T21:58:13.959Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.