← All advisories

Critical severity9.8NVD Advisory· Published Jan 6, 2021· Updated Jun 17, 2026

CVE-2020-36177

CVE-2020-36177

Description

RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WolfSSL/Wolfssl2 versions
cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*range: <4.6.0
- (no CPE)range: <4.6.0
wolfSSL/wolfSSLdescription

Patches

Vulnerability mechanics

References

5

github.com/wolfSSL/wolfssl/commit/63bf5dc56ccbfc12a73b06327361687091a4c6f7nvdPatchThird Party Advisory
github.com/wolfSSL/wolfssl/commit/fb2288c46dd4c864b78f00a47a364b96a09a5c0fnvdPatchThird Party Advisory
github.com/wolfSSL/wolfssl/pull/3426nvdPatchThird Party Advisory
bugs.chromium.org/p/oss-fuzz/issues/detailnvdExploitMailing ListThird Party Advisory
github.com/wolfSSL/wolfssl/releases/tag/v4.6.0-stablenvdThird Party Advisory

News mentions

0

No linked articles in our index yet.