Weak Digest Algorithm Vulnerability in wolfSSL TLS 1.2

CVE-2025-12889

What is CVE-2025-12889?

In TLS 1.2 connections, the wolfSSL implementation allows clients to select weaker digest algorithms when forming connections. This results in potential security risks, as these weaker digests can compromise the authentication and integrity of the secure communication, enabling attackers to exploit the protocol and potentially intercept sensitive data. Users are advised to ensure stronger algorithms are enforced in their configurations to mitigate this risk.

References