Security Advisory

CVE-2026-6094

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-25 16:35:48

Last updated 2026-06-25 17:59:41

Assigner wolfSSL

CVSS score 6.3

State PUBLISHED

Description

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

← Browse all CVEs View on cve.org ↗