CVE-2026-6681CWE-120CWE-787

PKCS#7 decode ignores caller output buffer size, writing past buffer bounds

Low · published June 25, 2026

CVSS v4.0
1.0
EPSS
0%
Percentile
30.4
In the wild
Unconfirmed
What it is

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written past the bounds of the provided buffer. This affects wolfSSL 5.9.0 and earlier and was fixed in the 5.9.1 release.

The record
Technical detail
CVSS v4.0
1.0 · LOW
Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/U:Clear
EPSS
0.00376 · 30.4th percentile
Weaknesses
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'); CWE-787 · Out-of-bounds Write
Published
2026-06-25T20:11Z
EPSS history
Timeline
  • 25 JUN 20:11Z
    PKCS#7 decode ignores caller output buffer size, writing past buffer bounds
    cvelistv5