WolfSSL 5.8.4
Approved changes feed: RSS · Atom
cpe:2.3:a:wolfssl:wolfssl:5.8.4:*:*:*:*:*:*:*
part: a version: 5.8.4 update: *
| Vendor | Wolfssl (c89e4e4f-7da7-5f15-8e26-95faf62010c7) |
|---|---|
| Product | Wolfssl (414ba146-de95-562a-aa94-820c6e63c09e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libwolfssl-dev |
purl2cpe | 2026-06-01 10:16:40.790322 |
pkg:deb/ubuntu/libwolfssl-dev |
purl2cpe | 2026-06-01 10:16:40.790323 |
pkg:github/wolfssl/wolfssl |
purl2cpe | 2026-06-01 10:16:40.790325 |
pkg:rpm/opensuse/wolfssl |
purl2cpe | 2026-06-01 10:16:40.790326 |
pkg:wolfssl/wolfssl |
purl2cpe | 2026-06-01 10:16:40.790328 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3580 |
vulnerable | 2026-06-08 08:01:18.994192 |
Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V
In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into conditional branches (bnez) by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret keys via timing analysis.
Published: 2026-03-19T19:46:58.783Z
Updated: 2026-03-19T20:25:20.427Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-3579 |
vulnerable | 2026-06-08 08:01:18.993677 |
Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I
wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted __muldi3 subroutine executes in variable time based on operand values. This affects multiple SP math functions (sp_256_mul_9, sp_256_sqr_9, etc.), leading to a timing side-channel that may expose sensitive cryptographic data.
Published: 2026-03-19T19:37:23.642Z
Updated: 2026-03-24T01:36:54.479Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12889 |
vulnerable | 2026-06-08 07:04:31.156261 |
TLS 1.2 Client Can Downgrade Digest Used
With TLS 1.2 connections a client can use any digest, specifically a weaker digest that is supported, rather than those in the CertificateRequest.
Published: 2025-11-21T23:06:59.827Z
Updated: 2025-12-08T15:39:52.743Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11931 |
vulnerable | 2026-06-08 07:04:29.424524 |
Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt
Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.
Published: 2025-11-21T22:57:32.802Z
Updated: 2025-12-08T15:38:46.308Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.