CVE-2026-3503

N/A

Description

Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key material and/or cryptographic outcomes via induced transient faults that corrupt or redirect seed/pointer values during Keccak-based expansion. This issue affects wolfSSL (wolfCrypt): commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6.

CVE Details

CVSS v3.1 ScoreN/A

Published3/19/2026

Last Modified3/20/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-335

References

https://github.com/wolfSSL/wolfssl/pull/9734(facts@wolfssl.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.