| Package | Affected versions | Patched versions |
|---|---|---|
| wolfssl | ≥ 5.8.0, < 5.9.2 | 5.9.2 |
Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free