CVE-2026-6681

1.0 lowEPSS 0.4%

Low (1.0) in wolfssl wolfssl. EPSS 0.4% chance of exploitation in the next 30 days.

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written past the bounds of the provided buffer. This affects wolfSSL 5.9.0 and earlier and was fixed in the 5.9.1 release.

Severity

CVSS 4.0

1.0 low

CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/U:Clear

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 31% of CVEs (scores of 2026-10-31)
CWEs: CWE-120, CWE-787
Published: 2026-06-25
Modified: 2026-06-27
Record from: the NVD, synced 2026-10-19

Affected

wolfssl:wolfssl

References

https://github.com/wolfSSL/wolfssl/pull/10116
https://www.wolfssl.com/docs/security-vulnerabilities/

Check your stack JSON