CVE-2025-11934: Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify
Improper input validation in the TLS 1.3 CertificateVerify signature algorithm negotiation in wolfSSL 5.8.2 and earlier on multiple platforms allows for downgrading the signature algorithm used. For example when a client sends ECDSA P521 as the supported signature algorithm the server previously could respond as ECDSA P256 being the accepted signature algorithm and the connection would continue with using ECDSA P256, if the client supports ECDSA P256.
Other sources
Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerify
— Microsoft
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11934?
CVE-2025-11934 has a moderate severity as it allows for downgrading the signature algorithm used during TLS negotiations.
How do I fix CVE-2025-11934?
To fix CVE-2025-11934, upgrade wolfSSL to version 5.8.3 or later to ensure proper input validation in the TLS 1.3 CertificateVerify process.
Which versions of wolfSSL are affected by CVE-2025-11934?
CVE-2025-11934 affects wolfSSL versions up to 5.8.2.
What types of platforms does CVE-2025-11934 affect?
CVE-2025-11934 affects multiple platforms that utilize wolfSSL.
What is the impact of exploiting CVE-2025-11934?
Exploiting CVE-2025-11934 could lead to weakened security through the downgrading of the signature algorithm during TLS connections.