Heap Out-of-Bounds Read in PKCS7 Parsing for WolfSSL

CVE-2026-5392

What is CVE-2026-5392?

A vulnerability exists in the PKCS7 parsing within WolfSSL where an improperly crafted PKCS7 message can lead to an out-of-bounds (OOB) read on the heap. This flaw stems from a missing bounds check during the indefinite-length end-of-content verification loop in the PKCS7_VerifySignedData() function. It highlights a critical need for meticulous handling of input data to ensure memory safety and integrity.

References