Ciphertext Comparison Flaw in WolfSSL's ML-KEM for ARM64 Architecture

CVE-2026-6330

What is CVE-2026-6330?

A vulnerability in the ML-KEM implementation for ARM64 architecture in wolfSSL is related to improper ciphertext comparison during the encryption process. Specifically, the comparison method only examines half of the re-encrypted ciphertext, which undermines the effective security measures mandated by the Fujisaki-Okamoto transform. As a result, a malicious actor could manipulate the ciphertext undetected, allowing them to bypass the necessary implicit rejection protocols established for IND-CCA2 security, potentially jeopardizing data integrity and confidentiality.

References