PT-2026-26329 · Wolfssl+1 · Wolfssl+2
CVE-2026-3503
·
Published
2026-01-01
·
Updated
2026-07-14
CVSS v3.1
5.2
Medium
| Vector | AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
wolfSSL (wolfCrypt) versions prior to commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6
Description
A protection mechanism failure exists in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) within wolfSSL on ARM Cortex-M microcontrollers. This allows a physical attacker to compromise key material and/or cryptographic outcomes. The attack involves inducing transient faults that corrupt or redirect seed/pointer values during Keccak-based expansion.
Recommendations
Update wolfSSL (wolfCrypt) to a version with commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Arm Cortex-M
Wolfcrypt
Wolfssl