← Database

CVE-2026-6094

CRITICAL CVSS: 9.1 Published: 2026-06-25 Modified: 2026-06-26

Description

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

Affected Platforms

Wolfssl Wolfssl

Weakness Type

CWE-125

References