CVE-2025-7395 — Domain Name Validation Bypass with Apple Native Certificate Validation

CVE-2025-7395

Domain Name Validation Bypass with Apple Native Certificate Validation PUBLISHED

Description (CNA)

A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION options results in the wolfSSL client failing to properly verify the server certificate's domain name, allowing any certificate issued by a trusted CA to be accepted regardless of the hostname.

Affected (CNA)

Vendor / product	Versions
wolfSSL / wolfSSL	affected 5.6.4 through 5.8.0

CWE

CWE-295

References

http://github.com/wolfssl/wolfssl.git

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.