Vulnerability in Wolfssl
CVE-2026-3579
wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted __muldi3 subroutine executes in variable time based on operand values. This affects multiple SP math…
EPSS: 0.000 (1.7th percentile) — read the EPSS interpretation.
Affected products
- Wolfssl — versions 0