CVE-2026-6094

Опубликовано: 25 июн. 2026

Источник: nvd

CVSS3: 9.1

EPSS Низкий

Описание

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

Ссылки

https://github.com/wolfSSL/wolfssl/pull/10128
Issue Tracking
Patch
https://www.wolfssl.com/docs/security-vulnerabilities/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*

Версия от 5.8.0 (включая) до 5.9.2 (исключая)

EPSS

Процентиль: 22%

0.00295

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2026-6094

CVSS3: 9.1

ubuntu

около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

CVE-2026-6094

msrc

около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData

CVE-2026-6094

CVSS3: 9.1

debian

около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing craf ...

GHSA-h6gc-rmv2-74g6

CVSS3: 9.1

github

около 1 месяца назад

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

EPSS

Процентиль: 22%

0.00295

Низкий

9.1 Critical

CVSS3

Дефекты

CWE-125