CVE-2026-3580: Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V

Published Mar 19, 2026

Updated

In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches (bnez) by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret keys via timing analysis.

Affected Software

2 affected components

wolfSSL wolfssl=5.8.4

Event History

Mar 19, 2026

CVE Published

via MITRE·07:46 PM

Data Sourced

via MITRE·07:46 PM

DescriptionWeakness

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeaknessAffected Software

Dec 26, 58199

Event

via FIRST·04:42 PM

Frequently Asked Questions

What is the severity of CVE-2026-3580?

CVE-2026-3580 has been assessed to potentially introduce critical vulnerabilities in applications using wolfSSL 5.8.4 on RISC-V.

How do I fix CVE-2026-3580?

To mitigate CVE-2026-3580, upgrade to a later version of wolfSSL that addresses the timing leak issue.

What does CVE-2026-3580 affect?

CVE-2026-3580 affects the wolfSSL 5.8.4 version specifically running on RISC-V architecture.

What is the nature of the flaw in CVE-2026-3580?

CVE-2026-3580 involves a compiler-induced timing leak that disrupts the constant-time property needed for secure ECC operations.

When was CVE-2026-3580 disclosed?

CVE-2026-3580 was disclosed in the context of vulnerabilities in the wolfSSL software library.