AIKIDO-2026-10432
wolfSSL.wolfssl is vulnerable to Protection Mechanism Failure
43
Medium Risk
This Affects:
wolfSSL.wolfsslTL;DR
ML-KEM and ML-DSA Keccak-based expansion on ARM Cortex-M can be influenced by transient faults that corrupt seeds or pointers during expansion, weakening post-quantum key material when an attacker can induce faults physically. The fix hardens the expansion path against such fault-induced misuse.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
wolfSSL.wolfssl is vulnerable to Protection Mechanism Failure in versions 0.0.1 - 5.8.4.
How to fix this
Upgrade the wolfSSL.wolfssl library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant