What’s Vulnerable › Vulnerabilities

CVE-2025-11932: Timing Side-Channel in PSK Binder Verification

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-11-21 · updated 2026-10-19
• Weakness: CWE-203

Description

The server previously verified the TLS 1.3 PSK binder using a non-constant time method which could potentially leak information about the PSK binder

Affected products

• wolfSSL: 5.8.2

References

• https://github.com/wolfSSL/wolfssl/pull/9223

Get alerted when CVE-2025-11932 or the next vulnerability affects your stack