Wolfssl: community verdicts

1 notable / known-exploited Wolfssl CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Wolfssl CVE, see NVD ↗.

CVE-2026-6330MED 6.5EPSS 0%
The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that code path. The constant-time comparison effectively ignored part of the re-encrypted ciphertext, so a decapsulating party could fail to detect a manipulated ciphertext and proceed without the standard's required implicit rejection.