AES-GCM Encryption Flaw in WolfSSL Streaming API

CVE-2026-55967

What is CVE-2026-55967?

A critical flaw exists in the AES-GCM encryption and decryption mechanisms within the wolfSSL streaming APIs, which fails to reject extremely large cumulative single message sizes exceeding 64 GiB. This oversight potentially allows for counter wrap and keystream reuse, which can lead to serious security implications including the recovery of plaintext data. Users and developers utilizing affected versions should act swiftly to apply the necessary patches to safeguard their applications from unauthorized access.

References