NVD - CVE-2026-5446 (original) (raw)
Initial Analysis by NIST 4/29/2026 1:25:21 PM
| Action | Type | Old Value | New Value |
|---|---|---|---|
| Added | CVSS V3.1 | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N | |
| Added | CPE Configuration | OR *cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:* versions from (including) 5.2.1 up to (excluding) 5.9.1 | |
| Added | Reference Type | wolfSSL Inc.: https://github.com/wolfSSL/wolfssl/pull/10111 Types: Issue Tracking, Patch |
New CVE Received from wolfSSL Inc. 4/09/2026 5:16:12 PM
| Action | Type | Old Value | New Value |
|---|---|---|---|
| Added | Description | In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wc_AriaEncrypt is stateless and passes the caller-supplied IV verbatim to the MagicCrypto SDK with no internal counter, and because the explicit IV is zero-initialized at session setup and never incremented in non-FIPS builds. This vulnerability affects wolfSSL builds configured with --enable-aria and the proprietary MagicCrypto SDK (a non-default, opt-in configuration required for Korean regulatory deployments). AES-GCM is not affected because wc_AesGcmEncrypt_ex maintains an internal invocation counter independently of the call-site guard. | |
| Added | CVSS V4.0 | AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | |
| Added | CWE | CWE-323 | |
| Added | Reference | https://github.com/wolfSSL/wolfssl/pull/10111 |