CVE-2026-5446

OVERVIEW CVE-2026-5446 is a cryptographic nonce reuse vulnerability in wolfSSL's ARIA-GCM cipher suite implementation affecting TLS 1.2 and DTLS 1.2 connections. The vulnerability occurs because the wc_AriaEncrypt function fails to maintain an internal counter for GCM nonces, causing the same 12-byte nonce to be reused for every application-data record when the MagicCrypto SDK is enabled. This flaw impacts only non-default wolfSSL builds compiled with the --enable-aria flag and the proprietary MagicCrypto SDK, a configuration primarily required for Korean regulatory compliance. AES-GCM cipher suites are not affected due to their independent invocation counter mechanism. SEVERITY The vulnerability presents a network-based attack vector with low complexity, as exploitation requires only establishing a TLS/DTLS session using affected ARIA-GCM cipher suites. Nonce reuse in GCM mode fundamentally undermines the authenticated encryption guarantee, potentially allowing attackers to forge ciphertexts and decrypt previously captured encrypted records. However, the impact is significantly constrained by the opt-in, non-default configuration requirement and limited adoption of ARIA cipher suites outside specific regulatory jurisdictions. EXPLOITATION STATUS There is currently no evidence of active exploitation in the wild. No public exploit code is documented, and the vulnerability received minimal community attention, as indicated by its inactive status on the CISA Known Exploited Vulnerabilities catalog. The extremely low EPSS score of 0.0005 reflects the limited attack surface posed by this configuration-specific vulnerability.