CVE-2026-5194: wolfSSL ECDSA Certificate Verification
Missing hash/digest size and OID checks allow digests smaller than allowed when verifying ECDSA certificates, or smaller than is appropriate for the relevant key type, to be accepted by signature verification functions. This could lead to reduced security of ECDSA certificate-based authentication if the public CA key used is also known. This affects ECDSA/ECC verification when EdDSA or ML-DSA is also enabled.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5194?
CVE-2026-5194 is classified as a critical vulnerability due to its potential to allow forged certificate usage.
How do I fix CVE-2026-5194?
To address CVE-2026-5194, update to the latest version of wolfSSL where the vulnerability has been patched.
What are the consequences of CVE-2026-5194?
The consequences of CVE-2026-5194 include the possibility of accepting weaker cryptographic signatures, which compromises the integrity of ECDSA certificates.
Which versions of wolfSSL are affected by CVE-2026-5194?
CVE-2026-5194 affects all versions of wolfSSL prior to the fix implemented in the pull request addressing this issue.
What is the impact of missing hash/digest size checks in CVE-2026-5194?
The impact of missing hash/digest size checks in CVE-2026-5194 could lead to weaker security as it may allow the acceptance of inadequate digest sizes during ECDSA certificate verification.