CVE-2020-36177: wolfSSL

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

RsaPad_PSS in wolfcrypt/src/rsa.c in wolfSSL before 4.6.0 has an out-of-bounds write for certain relationships between key size and digest size.

Affected products

• wolfSSL wolfSSL: before 4.6.0 (fixed in 4.6.0)

Published 2021-01-06. Last modified 2026-06-17.