Security Advisory
CVE-2025-11931
8.2
HIGH
Vulnerability Description
Integer Underflow Leads to Out-of-Bounds Access in XChaCha20-Poly1305 Decrypt. This issue is hit specifically with a call to the function wc_XChaCha20Poly1305_Decrypt() which is not used with TLS connections, only from direct calls from an application.
Published Date
November 21, 2025
Official Source
NIST NVD Advisory