Alpine/wolfssl: critical 9.1
Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.
Action: Upgrade wolfssl to 5.9.2-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.8.0 | 5.9.2-r0 | - |
Fixed versions
| 5.9.2-r0 |
Sources
published · modified · JSON