CVE-2026-6094 UNKNOWN

CVE-2026-6094

Published: 2026-06-25

Description

Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.

AI Intelligence Brief

AI Intelligence

Analyzing vulnerability vectors…