CVE-2026-6681

MediumCVSS 5.3/10Last modified Jun 27, 2026

Description

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written past the bounds of the provided buffer. This affects wolfSSL 5.9.0 and earlier and was fixed in the 5.9.1 release.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-120 CWE-787

Affected software

No affected versions have been published.

Timeline

Published: Jun 25, 2026
Last modified: Jun 27, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-668105.5Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.CVE-2026-668148.8Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-668166.5Insufficient logging in SQL Server allows an authorized attacker to bypass a security feature over a network.CVE-2026-668188.8Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network.CVE-2026-668198.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate CVE-2026-66827.6In FatFS R0.16 and earlier contains a FAT32 integer overflow bug in mount_volume() where fasize *= fs->n_fats can wrap, leading to attacker-CVE-2026-668208.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate CVE-2026-668225.9Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclose information over a network.CVE-2026-668249.2A stored cross-site scripting vulnerability existed in the capture tree visualization page. The application embedded the serialized capture CVE-2026-668256.9Pivotick contains a cross-site scripting vulnerability in the sidebar property-list component. Values associated with link-like properties, CVE-2026-668296.1URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker CVE-2026-66834.6FatFs R0.16 and earlier contains a divide-by-zero in exFAT sync logic bug when crafted metadata causes n_fatent - 2 to be zero during write/