Description
Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-length end-of-content verification loop in PKCS7_VerifySignedData().
References (1)
Scores
CVSS v3
5.4
EPSS
0.0001
EPSS Percentile
2.5%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-125
Status
published
Products (2)
wolfSSL/wolfSSL
< 5.9.1
wolfssl/wolfssl
< 5.9.1
Published
Apr 10, 2026
Tracked Since
Apr 10, 2026