By vendor

Wolfssl vulnerabilities

Known CVEs affecting Wolfssl products, prioritized by severity, with SEC.co remediation and detection guidance.

5 published vulnerabilities

• CVE-2026-11999HIGH 7.5

  A flaw in wolfSSL's OpenSSL compatibility layer allows attackers to bypass certificate trust validation in certain configurations. When an application uses wolfSSL's X509_verify_cert() function with untrusted intermediate certificates and the certificate chain exceeds 100 levels deep, the library incorrectly accepts the chain without verifying it reaches a trusted root certificate. This only affects applications built with OpenSSL compatibility mode enabled that manually perform certificate verification; standard TLS connections are not vulnerable.

• CVE-2026-55961HIGH 7.5

  wolfSSL's PKCS#7 verification function returns success for certificate-only bundles that contain no actual signatures. This means applications relying on PKCS#7_verify() to authenticate content will incorrectly believe unsigned or improperly signed objects are legitimate. An attacker can craft a degenerate PKCS#7 bundle with empty signature data, and if your application processes it, the verification function falsely confirms its authenticity. This is particularly dangerous for code-signing, email verification, or document authentication workflows.

• CVE-2026-55967HIGH 7.5

  A cryptographic flaw in wolfSSL's AES-GCM streaming implementation fails to reject messages larger than 64 GiB, causing the encryption counter to wrap around and reuse the same keystream. This allows attackers to recover plaintext from encrypted data without knowing the encryption key. The vulnerability requires network access and no authentication, making it a serious confidentiality risk for any application using wolfSSL's streaming APIs with large messages.

• CVE-2026-6091MEDIUM 6.5

  A vulnerability in wolfSSL's certificate verification logic may incorrectly accept X.509 certificate chains that end at an intermediate certificate controlled by an attacker, rather than terminating at a trusted root authority. When the partial-chain verification flag is enabled in OpenSSL-compatible code, an attacker with low privileges can craft a malicious certificate chain that bypasses the normal validation requirements. This could allow the attacker to impersonate legitimate services or intercept communications in scenarios where certificate pinning or strict chain validation is relied upon for security.

• CVE-2026-6291MEDIUM 6.5

  wolfSSL's PKCS#7 encryption decryption contains a timing-based information leak that allows attackers to recover encryption keys. When decrypting encrypted messages using RSA, the library returned different error messages depending on whether the encryption padding was valid or the message contents were corrupt. An attacker with network access could exploit this distinction by sending specially crafted encrypted messages and analyzing the responses to gradually reconstruct the underlying encryption key, similar to historical Bleichenbacher attacks. The vulnerability requires authenticated access (login credentials) and affects confidentiality of encrypted data but not integrity or system availability.