CVE-2025-7395

No fix known EPSS <1%CVSS 9.2

A certificate verification error in wolfSSL when building with the WOLFSSL_SYS_CA_CERTS and WOLFSSL_APPLE_NATIVE_CERT_VALIDATION options results in the wolfSSL client failing to properly verify the server certificate's domain name, allowing any certificate issued by a trusted CA to be accepted regardless of the hostname.

Published 2025-07-18 · CVE record · OSV

Products: wolfssl

Distro releases