CVE-2026-5446

The record

In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wc_AriaEncrypt is stateless and passes the caller-supplied IV verbatim to the MagicCrypto SDK with no internal counter, and because the explicit IV is zero-initialized at session setup and never incremented in non-FIPS builds. This vulnerability affects wolfSSL builds configured with --enable-aria and the proprietary MagicCrypto SDK (a non-default, opt-in configuration required for Korean regulatory deployments). AES-GCM is not affected because wc_AesGcmEncrypt_ex maintains an internal invocation counter independently of the call-site guard.

Affected packages

Related vulnerabilities

• CVE-2026-50577 ePA 3.x Integration implements the authorization workflow and writes Medical Information… CWE-323
• CVE-2026-17578 Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforce key rotation… CWE-323
• CVE-2026-21383 Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping… CWE-323
• CVE-2026-56369 ImageMagick before 7.1.2-22 contains an information disclosure vulnerability in the… CWE-323
• CVE-2026-55967 AES-GCM encryption/decryption with extremely large cumulative single message sizes (>64… CWE-323
• CVE-2026-12205 Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to… CWE-323
• CVE-2026-49952 Discuz! CWE-323
• GHSA-qv2q-c278-pch5 ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse CWE-323