CVE-2021-24116: wolfSSL

Medium severity, CVSS 4.9. EPSS: 1.2% chance of exploitation in the next 30 days.

In wolfSSL through 4.6.0, a side-channel vulnerability in base64 PEM file decoding allows system-level (administrator) attackers to obtain information about secret RSA keys via a controlled-channel and side-channel attack on software running in isolated environments that can be single stepped, especially Intel SGX.

Affected products

• wolfSSL wolfSSL: before 4.6.0 (fixed in 4.6.0)

Published 2021-07-14. Last modified 2026-06-17.