CVE-2019-19962: wolfSSL

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

wolfSSL before 4.3.0 mishandles calls to wc_SignatureGenerateHash, leading to fault injection in RSA cryptography.

Affected products

• wolfSSL wolfSSL: before 4.3.0 (fixed in 4.3.0)

Published 2019-12-25. Last modified 2026-06-17.