CVE-2020-11713: wolfSSL

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

wolfSSL 4.3.0 has mulmod code in wc_ecc_mulmod_ex in ecc.c that does not properly resist timing side-channel attacks.

Affected products

• wolfSSL wolfSSL: version 4.3.0 only

Published 2020-04-12. Last modified 2026-06-17.