Approved changes feed: RSS · Atom

cpe:2.3:a:wolfssl_inc.:wolfssl:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWolfssl Inc. (43d9672b-1945-5314-a3e7-7bae3d3b5649)
ProductWolfssl (8677ea13-82db-537f-874d-de2b9d054b96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3849 vulnerable 2026-06-08 08:01:19.563630 Buffer Overflow in HPKE via Oversized ECH Config
Stack Buffer Overflow in wc_HpkeLabeledExtract via Oversized ECH Config. A vulnerability existed in wolfSSL 5.8.4 ECH (Encrypted Client Hello) support, where a maliciously crafted ECH config could cause a stack buffer overflow on the client side, leading to potential remote execution and client program crash. This could be exploited by a malicious TLS server supporting ECH. Note that ECH is off by default, and is only enabled with enable-ech.
Published: 2026-03-19T20:29:30.839Z
Updated: 2026-03-25T14:21:17.389Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5288 vulnerable 2026-06-08 06:56:15.421506 Safe-error attack on TLS 1.3 Protocol
MEDIUM (5.1)
An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA key disclosure. When WOLFSSL_CHECK_SIG_FAULTS is used in signing operations with private ECC keys, such as in server-side TLS connections, the connection is halted if any fault occurs. The success rate in a certain amount of connection requests can be processed via an advanced technique for ECDSA key recovery.
Published: 2024-08-27T18:36:28.555Z
Updated: 2024-08-27T19:23:20.376Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.