https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T13:47:39.220455+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-55866 EUVD-2026-55866 2026-10-12T13:47:39.240254+00:00 EUVD-2026-55866 https://cve.radiocsirt.org/vuln/fkie_cve-2019-13628 fkie_cve-2019-13628 2026-10-12T13:47:39.240294+00:00

wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about the nonces used and potentially mount a lattice attack to recover the private key used. The issue occurs because ecc.c scalar multiplication might leak the bit length.

 https://cve.radiocsirt.org/vuln/ghsa-q95h-vc86-hv77 GHSA-q95h-vc86-hv77 — wolfCrypt leaks cryptographic information via timing side channel 2026-10-12T13:47:39.240352+00:00

Affected: PyPI: wolfcrypt

wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without `--enable-fpecc`, `--enable-sp`, or` --enable-sp-math`) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about the nonces used and potentially mount a lattice attack to recover the private key used. The issue occurs because ecc.c scalar multiplication might leak the bit length.

 https://cve.radiocsirt.org/vuln/gsd-2019-13628 gsd-2019-13628 2026-10-12T13:47:39.240403+00:00 gsd-2019-13628 https://cve.radiocsirt.org/vuln/pysec-2026-1066 PYSEC-2026-1066 — wolfCrypt leaks cryptographic information via timing side channel 2026-10-12T13:47:39.240426+00:00

Affected: PyPI: wolfcrypt

wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without `--enable-fpecc`, `--enable-sp`, or` --enable-sp-math`) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about the nonces used and potentially mount a lattice attack to recover the private key used. The issue occurs because ecc.c scalar multiplication might leak the bit length.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-13628 UBUNTU-CVE-2019-13628 2026-10-12T13:47:39.240464+00:00

Affected: Ubuntu:16.04:LTS: wolfssl, Ubuntu:18.04:LTS: wolfssl

wolfSSL and wolfCrypt 4.0.0 and earlier (when configured without --enable-fpecc, --enable-sp, or --enable-sp-math) contain a timing side channel in ECDSA signature generation. This allows a local attacker, able to precisely measure the duration of signature operations, to infer information about the nonces used and potentially mount a lattice attack to recover the private key used. The issue occurs because ecc.c scalar multiplication might leak the bit length.