Skip to content

Product

wolfSSL wolfCrypt vulnerabilities

3 published CVES affecting wolfSSL wolfCrypt, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
2
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest wolfSSL wolfCrypt CVEs

Newest publication first

  1. CVE-2024-2881 Fault Injection of EdDSA signature in WolfCrypt

    Published
    HighCVSS 8.8

    Fault Injection vulnerability in wc_ed25519_sign_msg function in wolfssl/wolfcrypt/src/ed25519.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault...

  2. CVE-2024-1545 Fault Injection of RSA encryption in WolfCrypt

    Published
    HighCVSS 8.8

    Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault in...

  3. CVE-2024-1543 AES T-Table sub-cache-line leakage

    Published
    MediumCVSS 5.5

    The side-channel protected T-Table implementation in wolfSSL up to version 5.6.5 protects against a side-channel attacker with cache-line resolution. In a controlled environment such as Intel SGX, an attacker can gain a per instruction sub-cache-line resolution allowing them to b...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.