Product by Debian
Wolfssl
15 known vulnerabilities in Wolfssl (Debian), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-6094 | Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData | 9.1 | |
| Critical | CVE-2026-5194 | wolfSSL ECDSA Certificate Verification | 9.1 | |
| High | CVE-2026-6325 | Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list | 7.5 | |
| High | CVE-2026-55961 | wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer | 7.5 | |
| High | CVE-2026-7511 | PKCS7_verify signer confusion allows forged signatures to be accepted | 7.5 | |
| High | CVE-2026-6331 | HMAC zero-length tag forgery in EVP_DigestVerifyFinal | 7.5 | |
| High | CVE-2026-55967 | wolfSSL: Reusing a Nonce, Key Pair in Encryption | 7.5 | |
| High | CVE-2026-6731 | X.509 name constraint bypass via Subject CN treated as a DNS name | 7.5 | |
| Medium | CVE-2026-6092 | Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configured | 5.3 | |
| Medium | CVE-2026-6681 | PKCS#7 decode ignores caller output buffer size, writing past buffer bounds | 5.3 | |
| Medium | CVE-2026-55962 | wolfSSL: Improper Authentication | 6.5 | |
| Medium | CVE-2026-6329 | PKCS#12 MAC verification uses attacker-controlled comparison length | 6.5 | |
| Medium | CVE-2026-6450 | CRL critical extension bypass in ParseCRL_Extensions | 5.3 | |
| Medium | CVE-2026-6678 | Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info | 5.3 | |
| Medium | CVE-2016-7440 | wolfSSL: security vulnerability | 5.5 |