Vulnerabilities > Wolfssl > Wolfssl > 4.0.0

DATE CVE VULNERABILITY TITLE RISK
2019-10-03 CVE-2019-13628 Information Exposure Through Discrepancy vulnerability in Wolfssl
wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side channel in ECDSA signature generation.
local
high complexity
wolfssl CWE-203
1.2
1.2
2019-09-24 CVE-2019-16748 Out-of-bounds Read vulnerability in Wolfssl
In wolfSSL through 4.1.0, there is a missing sanity check of memory accesses in parsing ASN.1 certificate data while handshaking.
network
low complexity
wolfssl CWE-125
7.5
7.5