CVE-2022-25638

CVE-2022-25638 describes a certificate validation bypass vulnerability in wolfSSL versions prior to 5.2.0, specifically impacting TLS 1.3 client authentication to a TLS 1.3 server. This medium-severity vulnerability (CVSS 6.5) allows an attacker to bypass certificate validation if the signature algorithm in the certificate_verify message differs from that in the certificate message, requiring user interaction (UI:R) for exploitation. While it has a high integrity impact (I:H), there is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low current threat level.