CVE-2026-55967 — AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse

CVE-2026-55967

AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse PUBLISHED

Description (CNA)

AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64 GiB) were not properly rejected by the streaming APIs, allowing counter wrap, keystream reuse, and consequent plaintext recovery.

Affected (CNA)

Vendor / product	Versions
wolfSSL / wolfSSL	affected 4.8.0 through 5.9.1

CWE

CWE-323

References

https://github.com/wolfSSL/wolfssl/pull/10709
https://www.wolfssl.com/docs/security-vulnerabilities/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.