CVE-2026-5466

wolfSSL's ECCSI signature verifier "wcVerifyEccsiHash" decodes the "r" and "s" scalars from the signature blob via "mpreadunsignedbin" with no check that they lie in "1, q-1". A crafted forged signature could verify against any message for any identity, using only publicly-known constants...

CVE-2026-5466: Improper Verification of Cryptographic Signature

wolfSSL's ECCSI signature verifier wcVerifyEccsiHash decodes the r and s scalars from the signature blob via mpreadunsignedbin with no check that they lie in 1, q-1. A crafted forged signature could verify against any message for any identity, using only publicly-known constants...