← Database

CVE-2025-11933

MEDIUM CVSS: 6.5 Published: 2025-11-21 Modified: 2026-06-17

Description

Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions.

Affected Platforms

Linux Linux KernelWolfssl WolfsslApple Macos

Weakness Type

CWE-20

References