CVE-2026-3579 PUBLISHED

Non-constant time multiplication subroutine __muldi3 on RISC-V RV32I

Assigner: wolfSSL
Reserved: 05.03.2026 Published: 19.03.2026 Updated: 19.03.2026

wolfSSL 5.8.4 on RISC-V RV32I architectures lacks a constant-time software implementation for 64-bit multiplication. The compiler-inserted __muldi3 subroutine executes in variable time based on operand values. This affects multiple SP math functions (sp_256_mul_9, sp_256_sqr_9, etc.), leading to a timing side-channel that may expose sensitive cryptographic data.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
CVSS Score: 2.1

Product Status

Vendor wolfSSL
Product wolfSSL
Versions Default: unaffected
  • affected from 0 to 5.9.0 (excl.)

Credits

  • Wind Wong finder

References

Problem Types

  • CWE-203 Observable Discrepancy CWE