https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:20:57.827956+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-21720 cnvd-2026-21720 2026-10-03T04:20:57.831642+00:00 cnvd-2026-21720 https://cve.radiocsirt.org/vuln/euvd-2026-277051 EUVD-2026-277051 2026-10-03T04:20:57.831682+00:00 EUVD-2026-277051 https://cve.radiocsirt.org/vuln/fkie_cve-2026-3579 fkie_cve-2026-3579 2026-10-03T04:20:57.831697+00:00

wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted __muldi3 subroutine executes in variable time based on operand values. This affects multiple SP math functions (sp_256_mul_9, sp_256_sqr_9, etc.), leading to a timing side-channel that may expose sensitive cryptographic data.

 https://cve.radiocsirt.org/vuln/ghsa-f5x4-gf23-wqm9 GHSA-f5x4-gf23-wqm9 2026-10-03T04:20:57.831725+00:00

wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted __muldi3 subroutine executes in variable time based on operand values. This affects multiple SP math functions (sp_256_mul_9, sp_256_sqr_9, etc.), leading to a timing side-channel that may expose sensitive cryptographic data.

 https://cve.radiocsirt.org/vuln/msrc_cve-2026-3579 msrc_CVE-2026-3579 — Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I 2026-10-03T04:20:57.831742+00:00 msrc_CVE-2026-3579 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-3579 UBUNTU-CVE-2026-3579 2026-10-03T04:20:57.831758+00:00

Affected: Ubuntu:16.04:LTS: wolfssl, Ubuntu:18.04:LTS: wolfssl, Ubuntu:20.04:LTS: wolfssl, Ubuntu:22.04:LTS: wolfssl, Ubuntu:24.04:LTS: wolfssl, Ubuntu:25.10: wolfssl, Ubuntu:26.04:LTS: wolfssl

wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted __muldi3 subroutine executes in variable time based on operand values. This affects multiple SP math functions (sp_256_mul_9, sp_256_sqr_9, etc.), leading to a timing side-channel that may expose sensitive cryptographic data.