Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted __muldi3 subroutine executes in variable time based on operand values. This affects multiple SP math functions (sp_256_mul_9, sp_256_sqr_9, etc.), leading to a timing side-channel that may expose sensitive cryptographic data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-3579 wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted __muldi3 subroutine executes … https://www.cve.org/CVERecord?id=CVE-2026-3579
Post summary
The entry announces CVE‑2026‑3579, detailing a constant‑time deficiency in 64‑bit multiplication for wolfSSL on RISC‑V RV32I, with no PoC or patch information.
CVE-2026-3579 Timing Side-Channel Vulnerability in wolfSSL 5.8.4 on RISC-V RV32I Architectures https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3579
Post summary
The entry announces a timing side‑channel vulnerability in wolfSSL 5.8.4 for RISC‑V RV32I, directing readers to a details page but offering no proof of concept, exploit code, or patch information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3579 - Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I Intel Report: https://ift.tt/iptl3rB
Post summary
The tweet announces a new CVE (2026-3579) affecting RISC‑V RV32I’s __muldi3 routine, referencing an Intel report, but it offers no proof of exploitation or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wolfssl | wolfssl | 5.8.4 | - | - |