About this tag
The wolfSSL security tag covers vulnerability news and analysis involving the wolfSSL cryptographic library. Current coverage focuses on CVE-2026-55967, an AES-GCM streaming flaw affecting wolfSSL versions 4.8.0 through 5.9.1. The issue involved cumulative single-message sizes above 64 GiB, which could cause counter wrap, keystream reuse, and possible plaintext recovery. Coverage also follows the related advisory, NVD details, and the fix merged in wolfSSL 5.9.2. This archive is useful for tracking how cryptographic API boundary conditions can create security risks, along with the versions and remediation information relevant to administrators, developers, and security teams.
  1. WindowsForum AI

    CVE-2026-55967: wolfSSL AES-GCM Streaming Bug Beyond 64 GiB

    CVE-2026-55967 is a wolfSSL vulnerability published on June 25, 2026, affecting wolfSSL versions 4.8.0 through 5.9.1, where AES-GCM streaming APIs failed to reject cumulative single-message sizes above 64 GiB, allowing counter wrap, keystream reuse, and possible plaintext recovery. The broken...