Skip to content
OpenAdvisories

Product · wolfSSL

wolfProvider

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-81019

    wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

    wolfProvider before 1.2.2 generates the 8-byte explicit AES-GCM nonce once when the TLS write key is set and never increments it per record. As a result every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted under an identical key and nonc…

    wolfSSL wolfProvider