PT-2026-26329 · Wolfssl+1 · Wolfssl+2
CVE-2026-3503
·
Publicado
2026-01-01
·
Atualizado
2026-07-14
CVSS v3.1
5.2
Média
| Vetor | AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
wolfSSL (wolfCrypt) versions prior to commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6
Description
A protection mechanism failure exists in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) within wolfSSL on ARM Cortex-M microcontrollers. This allows a physical attacker to compromise key material and/or cryptographic outcomes. The attack involves inducing transient faults that corrupt or redirect seed/pointer values during Keccak-based expansion.
Recommendations
Update wolfSSL (wolfCrypt) to a version with commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6 or later.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Arm Cortex-M
Wolfcrypt
Wolfssl