CVE-2026-6094

Опубликовано: 02 июл. 2026

Источник: msrc

CVSS3: 9.1

EPSS Низкий

Описание

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData

EPSS

Процентиль: 21%

0.00294

Низкий

9.1 Critical

CVSS3

Связанные уязвимости

CVE-2026-6094

CVSS3: 9.1

ubuntu

около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

CVE-2026-6094

CVSS3: 9.1

nvd

около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

CVE-2026-6094

CVSS3: 9.1

debian

около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing craf ...

GHSA-h6gc-rmv2-74g6

CVSS3: 9.1

github

около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

EPSS

Процентиль: 21%

0.00294

Низкий

9.1 Critical

CVSS3