| Package | Affected versions | Patched versions |
|---|---|---|
| wolfssl | ≥ 4.8.0, < 5.9.2 | 5.9.2 |
AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free