Skip to content
OpenAdvisories

Product · wolfSSL

wolfEngine

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-81341

    wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

    wolfEngine before 1.4.1 sources the explicit AES-CCM nonce for TLS 1.2 and DTLS 1.2 records from the record input buffer instead of the TLS sequence number carried in the additional authenticated data. Because the record layer leaves the explicit-nonce field …

    wolfSSL wolfEngine