Logo
vulnerabilityCVE-2025-7395
Name
CVE-2025-7395
Source
NVD ( link)Debian ( link)
Description
A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION options results in the wolfSSL client failing to properly verify the server certificate's domain name, allowing any certificate issued by a trusted CA to be accepted regardless of the hostname.
Published Date
Updated Date
Workaround
-
Advisories

Analysis#


Affected Component
Analysis
wolfssl
Exploitable

Vulnerability Ratings#


9.2
CVSSv4
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
5.9.2
Not Affected
buildroot
master
5.9.2
Not Affected
openwrt
master
5.9.2-r1
Not Affected
openwrt
openwrt-25.12
5.9.2-r1
Not Affected
yocto
kirkstone
5.2.0
Not Affected
yocto
master
5.9.2
Not Affected