Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wc_AriaEncrypt is stateless and passes the caller-supplied IV verbatim to the MagicCrypto SDK with no internal counter, and because the explicit IV is zero-initialized at session setup and never incremented in non-FIPS builds. This vulnerability affects wolfSSL builds configured with --enable-aria and the proprietary MagicCrypto SDK (a non-default, opt-in configuration required for Korean regulatory deployments). AES-GCM is not affected because wc_AesGcmEncrypt_ex maintains an internal invocation counter independently of the call-site guard.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-09 | 2 | Disclosure2 |
| 2026-04-14 | 1 | Disclosure1 |
CVE-2026-5446 GCM Nonce Reuse Vulnerability in wolfSSL ARIA-GCM TLS 1.2 and DTLS 1.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5446
Post summary
The text announces the discovery of CVE-2026-5446, a GCM nonce reuse vulnerability in wolfSSL, without additional exploit or mitigation details.
🚨*CVE* CVE-2026-5446 In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wc_AriaEncrypt is statel… https://www.cve.org/CVERecord?id=CVE-2026-5446 ----- Traducción: CVE-2026-5446 En … http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑5446, describing a nonce reuse flaw in wolfSSL’s ARIA‑GCM cipher suites, but offers no PoC, exploit code, active exploitation, or patch information.
CVE-2026-5446 In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wc_AriaEncrypt is statel… https://www.cve.org/CVERecord?id=CVE-2026-5446
Post summary
This brief statement announces CVE-2026-5446, detailing how wolfSSL’s ARIA‑GCM cipher suites reuse the same 12‑byte nonce for each record, indicating a potential security flaw, but it offers no PoC, exploit, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wolfssl | wolfssl | - | - | - |