CVE-2026-3580 — Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V

CVE-2026-3580

Compiler-induced timing leak in sp_256_get_entry_256_9 on RISC-V PUBLISHED

Description (CNA)

In wolfSSL 5.8.4, constant-time masking logic in sp_256_get_entry_256_9 is optimized into conditional branches (bnez) by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret keys via timing analysis.

Affected (CNA)

Vendor / product	Versions
wolfSSL / wolfSSL	affected 0 before 5.9.0

CWE

CWE-203

References

https://github.com/wolfSSL/wolfssl/pull/9855

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.