CVE-2025-11933
Medium · 6.5CVSS
6.5
EPSS
0.5%
Published
Nov 21, 2025
CISA due date
—
The record
Improper Input Validation in the TLS 1.3 CKS extension parsing in wolfSSL 5.8.2 and earlier on multiple platforms allows a remote unauthenticated attacker to potentially cause a denial-of-service via a crafted ClientHello message with duplicate CKS extensions.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|