CVE-2026-3503
Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key material and/or cryptographic outcomes via induced transient faults that corrupt or redirect seed/pointer values during Keccak-based expansion. This issue affects wolfSSL (wolfCrypt): commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.3
- CVSS vector
- CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:L/SI:L/SA:N/U:Amber
- EPSS probability
- 0.15%
- CWE
- CWE-335
- Published
- 2026-03-19
- Last modified
- 2026-03-19
Affected products
- wolfSSL Inc. wolfSSL (wolfCrypt)
Weakness type
Related vulnerabilities
- CVE-2026-11702 — Bytes::Random::Secure::Tiny versions through 1.011 for Perl share internal state across forked processes
- CVE-2026-11625 — Bytes::Random::Secure versions through 0.29 for Perl share internal state across forked processes
- CVE-2026-41564 — CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking
- CVE-2025-52578 — Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec...
- CVE-2025-27580 — NIH BRICS (aka Biomedical Research Informatics Computing System) through 14.0.0-67 generates...
- CVE-2025-24783 — Apache Cocoon: continuations may not be private
- CVE-2024-55566 — ColPack 1.0.10 through 9a7293a has a predictable temporary file (located under /tmp with a name...
- CVE-2024-1579 — Insufficient seeding of random number generator