Approved changes feed: RSS · Atom
cpe:2.3:a:wolfssl_inc.:wolfssl:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wolfssl Inc. (43d9672b-1945-5314-a3e7-7bae3d3b5649) |
|---|---|
| Product | Wolfssl (8677ea13-82db-537f-874d-de2b9d054b96) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3849 |
vulnerable | 2026-06-08 08:01:19.563630 |
Buffer Overflow in HPKE via Oversized ECH Config
Stack Buffer Overflow in wc_HpkeLabeledExtract via Oversized ECH Config. A vulnerability existed in wolfSSL 5.8.4 ECH (Encrypted Client Hello) support, where a maliciously crafted ECH config could cause a stack buffer overflow on the client side, leading to potential remote execution and client program crash. This could be exploited by a malicious TLS server supporting ECH. Note that ECH is off by default, and is only enabled with enable-ech.
Published: 2026-03-19T20:29:30.839Z
Updated: 2026-03-25T14:21:17.389Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5288 |
vulnerable | 2026-06-08 06:56:15.421506 |
Safe-error attack on TLS 1.3 Protocol
MEDIUM (5.1)
An issue was discovered in wolfSSL before 5.7.0. A safe-error attack via Rowhammer, namely FAULT+PROBE, leads to ECDSA key disclosure. When WOLFSSL_CHECK_SIG_FAULTS is used in signing operations with private ECC keys,
such as in server-side TLS connections, the connection is halted if any fault occurs. The success rate in a certain amount of connection requests can be processed via an advanced technique for ECDSA key recovery.
Published: 2024-08-27T18:36:28.555Z
Updated: 2024-08-27T19:23:20.376Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.