CVE-2026-5466

wolfSSL's ECCSI signature verifier "wcVerifyEccsiHash" decodes the "r" and "s" scalars from the signature blob via "mpreadunsignedbin" with no check that they lie in "1, q-1". A crafted forged signature could verify against any message for any identity, using only publicly-known constants...

wolfssl:cryptofuzz-heapmath: Use-of-uninitialized-value in mp_read_unsigned_bin

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=4515959823990784 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-heapmath Job Type: libfuzzermsanwolfssl Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address:...

wolfssl:fuzzer-wolfssh-server-randomize: Crash in mp_read_unsigned_bin

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=5912002306375680 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssh-server-randomize Job Type: libfuzzerasani386wolfssl Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

OSV-2020-2171 Stack-buffer-overflow in fp_read_unsigned_bin

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27666 Crash type: Stack-buffer-overflow READ 8 Crash state: fpreadunsignedbin mpreadunsignedbin wcRsaPublicKeyDecodeRaw...