SEC.co
Emergency

By weakness (CWE)

CWE-323: related vulnerabilities

CVEs classified under CWE-323. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-55967HIGH 7.5

    A cryptographic flaw in wolfSSL's AES-GCM streaming implementation fails to reject messages larger than 64 GiB, causing the encryption counter to wrap around and reuse the same keystream. This allows attackers to recover plaintext from encrypted data without knowing the encryption key. The vulnerability requires network access and no authentication, making it a serious confidentiality risk for any application using wolfSSL's streaming APIs with large messages.