CVE-2025-11931 — Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt

CVE-2025-11931

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt PUBLISHED

Description (CNA)

Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.

Affected (CNA)

Vendor / product	Versions
wolfSSL / wolfSSL	affected 0 before 5.8.4

CWE

CWE-191

References

https://github.com/wolfSSL/wolfssl/pull/9223

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.