CVE-2026-6678
LOW
1.0
CVSS 4.0
Description
Integer underflow in wc_PKCS7_DecryptOri when handling crafted Other Recipient Info, leading to incorrect length handling during decryption.
Metadata
Severity & Metrics
1.0
LOW CVSS 4.0
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/U:Clear
Affected products (1)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| wolfSSL | wolfSSL | — | 3.15.5 ≤ 5.9.1 |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| CWE-191 | cna | CWE-191 Integer Underflow (Wrap or Wraparound) |
CVSS scores (1)
| Score | Severity | Version | Source | Vector |
|---|---|---|---|---|
| 1.0 | LOW | 4.0 | cna | CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/U:Clear |
References (2)