CVE-2026-6681 — PKCS#7 decode ignores caller output buffer size, writing past buffer bounds

CVE-2026-6681

PKCS#7 decode ignores caller output buffer size, writing past buffer bounds PUBLISHED

Description (CNA)

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written past the bounds of the provided buffer. This affects wolfSSL 5.9.0 and earlier and was fixed in the 5.9.1 release.

Affected (CNA)

Vendor / product	Versions
wolfSSL / wolfSSL	affected 3.10.0 through 5.9.0

CWE

CWE-787, CWE-120

References

https://github.com/wolfSSL/wolfssl/pull/10116
https://www.wolfssl.com/docs/security-vulnerabilities/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.