The vulnerability is an incomplete constant‑time ciphertext comparison in the AVX2 implementation of the Fujisaki‑Okamoto transform used by wolfSSL’s ML‑KEM‑1024. Because the final 32‑byte block of the 1568‑byte ciphertext is never compared, a ciphertext that is altered only in that block can be accepted, causing the library to return the true shared secret instead of performing the required implicit rejection. This flaw breaks IND‑CCA2 security and permits an attacker to obtain the session key, a serious cryptographic leakage classified as CWE‑327.

wolfSSL is the affected vendor and product. The CVE payload does not specify affected version ranges or precise build settings; the flaw is present in implementations that compile the AVX2 constant‑time comparison for the ML‑KEM‑1024 algorithm.

The CVSS score of 6.3 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV, so the probability of widespread real‑world exploitation is unclear. However, the flaw can be leveraged by sending a manipulated ciphertext that differs only in the final 32 bytes during normal operation; if an attacker can influence the ciphertext sent to a vulnerable instance, they can recover the shared secret. No special privileges or additional conditions are described, so the attack path is purely data‑based.