CVE-2026-81019

Name of the Vulnerable Software and Affected Versions wolfProvider versions prior to 1.2.2

Description The software generates the 8-byte explicit AES-GCM nonce only once when the TLS write key is set and fails to increment it for each record. Consequently, every TLS 1.2 and DTLS 1.2 AES-GCM record within a connection is encrypted using the same key and nonce pair. This reuse of a Galois/Counter Mode (GCM) key and nonce discloses the keystream, allowing an attacker to recover plaintexts if one record is known, and leaks the GHASH authentication key, which enables the forgery of authentication tags.

Recommendations Update to version 1.2.2.