Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h6gc-rmv2-74g6

Опубликовано: 25 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.3
CVSS3: 9.1

Описание

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

EPSS

Процентиль: 22%
0.00295
Низкий

6.3 Medium

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 9.1
ubuntu
около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

CVSS3: 9.1
nvd
около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

msrc
около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData

CVSS3: 9.1
debian
около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing craf ...

EPSS

Процентиль: 22%
0.00295
Низкий

6.3 Medium

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-125