Wofssl vulnerabilities
3 vulnerabilities
Known vulnerabilities in Wofssl products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Wolfssl3 vulnerabilities
RoutineCVE-2026-3229wofssl · wolfssl +4 moreInteger Overflow in Certificate Chain AllocationAn integer overflow vulnerability existed in the static function wolfssl_add_to_chain, that caused heap corruption when certificate data was written out of bounds of an insufficiently sized certificate buffer. wolfssl_add_to_chain is called by these API: wolfSSL_CTX_add_extra_chain_cert, wolfSSL_CTX_add1_chain_cert, wolfSSL_add0_chain_cert. These API are enabled for 3rd party compatibility features: enable-opensslall, enable-opensslextra, enable-lighty, enable-stunnel, enable-nginx, enable-haproxy. This issue is not remotely exploitable, and would require that the application context loading certificates is compromised.CVSS5.5MediumEPSS0.07%PrioritiseCVE-2026-3549wofssl · wolfssl +4 moreECH parsing heap buffer overflowHeap Overflow in TLS 1.3 ECH parsing. An integer underflow existed in ECH extension parsing logic when calculating a buffer length, which resulted in writing beyond the bounds of an allocated buffer. Note that in wolfSSL, ECH is off by default, and the ECH standard is still evolving.CVSS9.8CriticalEPSS0.50%RoutineCVE-2025-11933wofssl · wolfssl +4 moreDoS Vulnerability in wolfSSL TLS 1.3 CKS ExtensionImproper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions.CVSS6.5MediumEPSS0.45%