OSV-2025-698
See a problem?- Import Source
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfssl/OSV-2025-698.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/OSV-2025-698
- Published
- 2025-09-02T00:02:49Z
- Modified
- 2026-10-20T17:25:45Z
- Summary
- Use-of-uninitialized-value in AesEncrypt_C
- Details
-
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=442261624
Crash type: Use-of-uninitialized-value Crash state: AesEncrypt_C wc_AesCbcEncrypt Encrypt - References
Affected packages
OSS-Fuzz / wolfssl
Package
- Name
- wolfssl
- Purl
- pkg:generic/wolfssl
Affected versions
WCv6.*
WCv6.0.0-RC1
WCv6.0.0-RC2
WCv6.0.0-RC3
WCv6.0.0-RC4
WCv6.0.0-RC5
WCv6.0.0-linuxkm-UPDT-RC1
WCv6.0.0-linuxkm-UPDT-RC2
v5.*
v5.2.1
v5.6.4-stable
v5.6.6-stable
v5.7.0-stable
v5.7.2-stable
v5.7.4-stable
v5.7.6-stable
v5.8.0-stable
v5.8.2-stable
v5.8.4-stable
Other
wolfEntropy1
wolfEntropy2
wolfEntropy2d
Database specific
fixed_range
"3062d152409c4d86f00cb13c65a9d6942e1ef86f:2b726ebf0bd2b7c58b39a2e89850cd5012424153"
introduced_range
"fc858ec33b7584f1515678ec056ff72f39eafdb3:a17d6ef751343223f8ea599817e287ebbb9667e9"
source
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfssl/OSV-2025-698.yaml"