MEDIUM

CVE-2026-6330

Wolfssl Wolfssl 2026-06-25 CVSS v3.1

CVSS

6.5

Description

The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that code path. The constant-time comparison effectively ignored part of the re-encrypted ciphertext, so a decapsulating party could fail to detect a manipulated ciphertext and proceed without the standard's required implicit rejection.

Weakness (CWE)

CWE-327

EPSS Score

0.17%

Probability of exploitation in next 30 days

6.6th percentile

References

https://github.com/wolfSSL/wolfssl/pull/10192 Issue Tracking, Patch https://www.wolfssl.com/docs/security-vulnerabilities/ Vendor Advisory

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE