Home Tools CVE CVE-2026-6678
MEDIUM

CVE-2026-6678

Wolfssl Wolfssl 2026-06-25 CVSS v3.1
CVSS
5.3

Description

Integer underflow in wc_PKCS7_DecryptOri when handling crafted Other Recipient Info, leading to incorrect length handling during decryption.

Weakness (CWE)

CWE-191

EPSS Score

0.33%
Probability of exploitation in next 30 days
26.3th percentile

References

https://github.com/wolfSSL/wolfssl/pull/10203 Issue Tracking, Patch https://www.wolfssl.com/docs/security-vulnerabilities/ Vendor Advisory https://www.talosintelligence.com/vulnerability_reports/TALOS-2026-2408
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE