CVE-2026-3503 in wolfSSLИнформация

Сводка

по MITRE • 19.03.2026

Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key material and/or cryptographic outcomes via induced transient faults that corrupt or redirect seed/pointer values during Keccak-based expansion.




This issue affects wolfSSL (wolfCrypt): commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Ответственный

wolfSSL

Резервировать

03.03.2026

Раскрытие

19.03.2026

Модерация

принято

Вход

VDB-351746

EPSS

0.00153

KEV

Нет

Деятельности

Очень низкий

Источники

Interested in the pricing of exploits?

See the underground prices here!