CVE-2025-11933 — DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension

CVE-2025-11933

DoS Vulnerability in wolfSSL TLS 1.3 CKS Extension PUBLISHED

Description (CNA)

Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions.

Affected (CNA)

Vendor / product	Versions
wofSSL / wolfSSL	affected 3.12.0 before 5.8.4

CWE

CWE-20

References

https://github.com/wolfSSL/wolfssl
https://github.com/wolfSSL/wolfssl/pull/9132

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.