Input Validation and Logic

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. An issue was discovered in wolfSSL before 5.5.0. When a TLS 1.3 client connects to a wolfSSL server and SSL_clear is called on its session, the server crashes with a segmentation…CVE-2022-38152Wolfssl · 2.9% likely

   CWE-754

2. TLS 1.3 client issue handling malicious server when not including a KSE and PSK extensionCVE-2023-3724wolfSSL · CVSS 9.1 · 0.7% likely

   CWE-20

3. Improper (D)TLS key boundary enforcementCVE-2023-6937wolfSSL · CVSS 5.3 · 0.5% likely

   CWE-20

4. Improper Validation of AES-GCM Authentication Tag Length in PKCS#7 Envelope Allows Authentication BypassCVE-2026-5500wolfSSL · CVSS 8.7 · 0.5% likely

   CWE-20

5. Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHelloCVE-2025-11936wolfSSL · CVSS 6.3 · 0.5% likely

   CWE-20

6. X25519 x86_64 assembly final reduction leaves non-canonical field elementCVE-2026-10512wolfSSL · CVSS 2.3 · 0.5% likely

   CWE-682

7. Encrypt-then-MAC could fall back to MAC-then-Encrypt when HAVE_ENCRYPT_THEN_MAC is configuredCVE-2026-6092wolfSSL · CVSS 2.1 · 0.4% likely

   CWE-757

8. ML-KEM-1024 x64 AVX2 incomplete cipher text comparison enables IND-CCA2 break and static private-key recoveryCVE-2026-10097wolfSSL · CVSS 8.3 · 0.3% likely

   CWE-697

9. Improper key_share validation in TLS 1.3 HelloRetryRequestCVE-2026-3230wolfSSL · CVSS 1.2 · 0.2% likely

   CWE-20

10. Improper Validation of Signature Algorithm Used in TLS 1.3 CertificateVerifyCVE-2025-11934wolfSSL · CVSS 2.1 · 0.2% likely

    CWE-20

11. (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchangeCVE-2026-93304wolfSSL · CVSS 6.3 · 0.2% likely

    CWE-696

12. TLS 1.2 Client Can Downgrade Digest UsedCVE-2025-12889wolfSSL · CVSS 2.3 · 0.1% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.