CVE catalog

CVE-2026-8720

wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the block size, producing a MAC that is independent of the input. When the supplied key is longer than the B

[CVE catalog]

Severity
Medium · CVSS 5.9
Published
Source
[NVD] · [CVE record]
EPSS
0.16% · Oct 25, 2026

wc_Blake2bHmacFinal and wc_Blake2sHmacFinal discard the message when the key length exceeds the block size, producing a MAC that is independent of the input. When the supplied key is longer than the BLAKE2 block size the key-hashing branch reinitialized the running hash state, discarding the accumulated message data, so the resulting MAC depended only on the key and not on the message being authenticated. This bug is specific to the HMAC-BLAKE2 APIs that were added in wolfSSL version 5.9.0.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianwolfsslsid5.9.2-1.2fixed
Debianwolfssltrixie5.7.2-0.1+deb13u2vulnerable
Debianwolfsslbookworm5.5.4-2+deb12u2vulnerable
Debianwolfsslbookworm-security5.5.4-2+deb12u3vulnerable
CpewolfsslNot reportedNot reportedvulnerable
CpewolfsslNot reported5.9.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianwolfsslsourcesid5.9.2-1not yet assignedNot reported[1140815]
Debianwolfsslsourcetrixie(unfixed)not yet assignedNot reported[1140815]
Debianwolfsslsourcebookworm(unfixed)end-of-lifeNot reported[1140815]
CpewolfsslcpeNot reported5.9.2Not reportedNot reportedNot reported

[Debian bug #1140815]

Notes

[trixie] wolfssl: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libwolfssl35]Affected

    Source package: [wolfssl]

    Details (4)

    • 5.5.4-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

  • [libwolfssl-dev]Affected

    Source package: [wolfssl]

    Details (4)

    • 5.5.4-2+deb12u2 · amd64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u2 · arm64 · bookworm

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · amd64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

    • 5.5.4-2+deb12u3 · arm64 · bookworm-security

      Affected

      nvd · wolfssl · debian · bookworm; nvd · wolfssl · debian · 12

[Debian 13 (Trixie)]

  • [libwolfssl42t64]Affected

    Source package: [wolfssl]

    Details (2)

    • 5.7.2-0.1+deb13u1 · amd64 · trixie

      Affected

      nvd · wolfssl · debian · 13

    • 5.7.2-0.1+deb13u1 · arm64 · trixie

      Affected

      nvd · wolfssl · debian · 13

  • [libwolfssl-dev]Affected

    Source package: [wolfssl]

    Details (2)

    • 5.7.2-0.1+deb13u1 · amd64 · trixie

      Affected

      nvd · wolfssl · debian · 13

    • 5.7.2-0.1+deb13u1 · arm64 · trixie

      Affected

      nvd · wolfssl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database]