CVE-2026-3503

Name of the Vulnerable Software and Affected Versions wolfSSL (wolfCrypt) versions prior to commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6

Description A protection mechanism failure exists in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) within wolfSSL on ARM Cortex-M microcontrollers. This allows a physical attacker to compromise key material and/or cryptographic outcomes. The attack involves inducing transient faults that corrupt or redirect seed/pointer values during Keccak-based expansion.

Recommendations Update wolfSSL (wolfCrypt) to a version with commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6 or later.