Logo
vulnerabilityCVE-2026-3503
Name
CVE-2026-3503
Source
NVD ( link)Debian ( link)
Description
Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key material and/or cryptographic outcomes via induced transient faults that corrupt or redirect seed/pointer values during Keccak-based expansion. This issue affects wolfSSL (wolfCrypt): commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
wolfssl
Not Affected

Vulnerability Ratings#


4.3
CVSSv4
5.2
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
5.9.1
Not Affected
buildroot
master
5.9.1
Not Affected
openwrt
master
5.9.1-r1
Not Affected
openwrt
openwrt-25.12
5.9.1-r1
Not Affected
yocto
kirkstone
5.2.0
Not Affected
yocto
scarthgap
5.7.2
Not Affected