VULNERABILITY INTELLIGENCE

CVE-2026-3503

CVSS score5.2 MEDIUM
EPSS probability0.16%
CISA KEVNot currently listed
Published2026-03-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Description

Protection mechanism failure in wolfCrypt post-quantum implementations (ML-KEM and ML-DSA) in wolfSSL on ARM Cortex-M microcontrollers allows a physical attacker to compromise key material and/or cryptographic outcomes via induced transient faults that corrupt or redirect seed/pointer values during Keccak-based expansion. This issue affects wolfSSL (wolfCrypt): commit hash d86575c766e6e67ef93545fa69c04d6eb49400c6.

Weakness classification

  • facts@wolfssl.com: CWE-335

Primary references