Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-52wm-3mqv-vmmj

Опубликовано: 10 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.3
CVSS3: 5.4

Описание

Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-length end-of-content verification loop in PKCS7_VerifySignedData().

Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-length end-of-content verification loop in PKCS7_VerifySignedData().

EPSS

Процентиль: 6%
0.00159
Низкий

2.3 Low

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 5.4
ubuntu
4 месяца назад

Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-length end-of-content verification loop in PKCS7_VerifySignedData().

CVSS3: 5.4
nvd
4 месяца назад

Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-length end-of-content verification loop in PKCS7_VerifySignedData().

msrc
4 месяца назад

wolfSSL heap OOB read in PKCS7 SignedData streaming

CVSS3: 5.4
debian
4 месяца назад

Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can ...

EPSS

Процентиль: 6%
0.00159
Низкий

2.3 Low

CVSS4

5.4 Medium

CVSS3

Дефекты

CWE-125