WolfSSL 5.8.2
Approved changes feed: RSS · Atom
cpe:2.3:a:wolfssl:wolfssl:5.8.2:*:*:*:*:*:*:*
part: a version: 5.8.2 update: *
| Vendor | Wolfssl (c89e4e4f-7da7-5f15-8e26-95faf62010c7) |
|---|---|
| Product | Wolfssl (414ba146-de95-562a-aa94-820c6e63c09e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libwolfssl-dev |
purl2cpe | 2026-06-01 10:16:40.790314 |
pkg:deb/ubuntu/libwolfssl-dev |
purl2cpe | 2026-06-01 10:16:40.790316 |
pkg:github/wolfssl/wolfssl |
purl2cpe | 2026-06-01 10:16:40.790318 |
pkg:rpm/opensuse/wolfssl |
purl2cpe | 2026-06-01 10:16:40.790319 |
pkg:wolfssl/wolfssl |
purl2cpe | 2026-06-01 10:16:40.790321 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-7396 |
vulnerable | 2026-06-08 07:43:18.462844 |
Curve25519 Blinding
In wolfSSL release 5.8.2 blinding support is turned on by default for Curve25519 in applicable builds. The blinding configure option is only for the base C implementation of Curve25519. It is not needed, or available with; ARM assembly builds, Intel assembly builds, and the small Curve25519 feature. While the side-channel attack on extracting a private key would be very difficult to execute in practice, enabling blinding provides an additional layer of protection for devices that may be more susceptible to physical access or side-channel observation.
Published: 2025-07-18T22:51:18.950Z
Updated: 2025-07-21T15:05:59.222Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-12888 |
vulnerable | 2026-06-08 07:04:31.155786 |
Constant Time Issue with Xtensa-based ESP32 and X22519
Vulnerability in X25519 constant-time cryptographic implementations due to timing side channels introduced by compiler optimizations and CPU architecture limitations, specifically with the Xtensa-based ESP32 chips. If targeting Xtensa it is recommended to use the low memory implementations of X25519, which is now turned on as the default for Xtensa.
Published: 2025-11-21T22:50:30.510Z
Updated: 2025-12-08T15:51:56.735Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11932 |
vulnerable | 2026-06-08 07:04:29.426086 |
Timing Side-Channel in PSK Binder Verification
The server previously verified the TLS 1.3 PSK binder using a non-constant time method which could potentially leak information about the PSK binder
Published: 2025-11-21T23:01:03.321Z
Updated: 2025-12-08T15:39:21.037Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.