Skip to content
OpenAdvisories

Vendor

wolfSSL

118 known vulnerabilities.

Products

wolfSSL 100 wolfSSH 10 wolfCrypt 2 wolfEngine 2 wolfSSL-py 1 wolfSSL (wolfCrypt) 1 wolfTPM 1 wolfProvider 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-6330 Public exploit

    ML-KEM ARM64 NEON ciphertext comparison only compares half of the input

    The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that code path. The constant-time comparison effectively ignored part of the re-encryp…

    wolfSSL wolfSSL wolfssl wolfssl Debian Ubuntu Alpine
  • High 7.5
    CVE-2017-13099 Public exploit EPSS 27%

    wolfSSL Bleichenbacher/ROBOT

    wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable wolfSSL application. This vulnerability is referred to as "ROBOT."

    wolfSSL wolfSSL wolfssl wolfssl Debian Ubuntu
  • High 8.1
    CVE-2017-2800 Public exploit

    A specially crafted x509 certificate can cause a single out of bounds byte overwrite in wolfSSL through 3.10.2 resultin…

    wolfSSL wolfSSL wolfssl wolfssl Debian Ubuntu