PT-2026-31863 · Wolfssl · Wolfssl

Published 2026-04-10 · Updated 2026-04-10 · CVE-2026-5479

NVD

CVSS v4.0

7.6

High

AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

In wolfSSL's EVP layer, the ChaCha20-Poly1305 AEAD decryption path in wolfSSL EVP CipherFinal (and related EVP cipher finalization functions) fails to verify the authentication tag before returning plaintext to the caller. When an application uses the EVP API to perform ChaCha20-Poly1305 decryption, the implementation computes or accepts the tag but does not compare it against the expected value.

Fix

Weakness Enumeration

CWE-354

Related Identifiers

CVE-2026-5479

Affected Products

Wolfssl

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-5479 · Security Note
• https://github.com/wolfSSL/wolfssl/pull/10102 · Note