PT-2026-52527 · Wolfssl · Wolfssl

Publicado 2026-06-25 · Atualizado 2026-06-25 · CVE-2026-55967

Mitre

CVSS v4.0

2.0

Baixa

Vetor base

AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery.

Correção

Enumeração de Fraquezas

CWE-323

Identificadores relacionados

CVE-2026-55967

Produtos afetados

Wolfssl

Referências · 3

• https://github.com/wolfSSL/wolfssl/pull/10709 · Correção
• https://wolfssl.com/docs/security-vulnerabilities · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-55967 · Nota de Segurança