Approved changes feed: RSS · Atom
cpe:2.3:a:wolfssl:wolfcrypt:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wolfssl (c89e4e4f-7da7-5f15-8e26-95faf62010c7) |
|---|---|
| Product | Wolfcrypt (694be367-cbf8-5909-8460-ae81b6b32882) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-2881 |
vulnerable | 2026-06-08 06:35:27.595609 |
Fault Injection of EdDSA signature in WolfCrypt
MEDIUM (6.7)
Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the ed25519_key structure.
Published: 2024-08-29T23:10:59.179Z
Updated: 2024-08-30T14:18:36.327Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1545 |
vulnerable | 2026-06-08 06:27:13.330906 |
Fault Injection of RSA encryption in WolfCrypt
MEDIUM (5.9)
Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the RsaKey structure.
Published: 2024-08-29T23:02:48.312Z
Updated: 2026-01-27T21:58:13.959Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1543 |
vulnerable | 2026-06-08 06:27:13.327841 |
AES T-Table sub-cache-line leakage
MEDIUM (4.1)
The side-channel protected T-Table implementation in wolfSSL up to version 5.6.5 protects against a side-channel attacker with cache-line resolution. In a controlled environment such as Intel SGX, an attacker can gain a per instruction sub-cache-line resolution allowing them to break the cache-line-level protection. For details on the attack refer to: https://doi.org/10.46586/tches.v2024.i1.457-500
Published: 2024-08-29T22:43:35.775Z
Updated: 2024-08-30T14:19:32.248Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.