OSV-2025-698

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfssl/OSV-2025-698.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-698
Published
2025-09-02T00:02:49.308939Z
Modified
2025-12-05T14:58:24.554802Z
Summary
Use-of-uninitialized-value in AesEncrypt_C
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=442261624

Crash type: Use-of-uninitialized-value
Crash state:
AesEncrypt_C
wc_AesCbcEncrypt
Encrypt
References

Affected packages

OSS-Fuzz / wolfssl

Package

Name
wolfssl
Purl
pkg:generic/wolfssl

Affected ranges

Type
GIT
Repo
https://github.com/wolfssl/wolfssl
Events
Introduced
7821c48e6521149ab0209e7eea3bc6d565b9d306
Fixed
2b726ebf0bd2b7c58b39a2e89850cd5012424153

Affected versions

v5.*
v5.2.1
v5.6.4-stable
v5.6.6-stable
v5.7.0-stable
v5.7.2-stable
v5.7.4-stable
v5.7.6-stable
v5.8.0-stable
v5.8.2-stable
v5.8.4-stable
Other
wolfEntropy1

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"3062d152409c4d86f00cb13c65a9d6942e1ef86f:2b726ebf0bd2b7c58b39a2e89850cd5012424153"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wolfssl/OSV-2025-698.yaml"
introduced_range 
"fc858ec33b7584f1515678ec056ff72f39eafdb3:a17d6ef751343223f8ea599817e287ebbb9667e9"