Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality. In wc_PKCS7_BuildSignedAttributes(), when adding custom signed attributes, the code passes an incorrect capacity value (esd->signedAttribsCount) to EncodeAttributes() instead of the remaining available space in the fixed-size signedAttribs[7] array. When an application sets pkcs7->signedAttribsSz to a value greater than MAX_SIGNED_ATTRIBS_SZ (default 7) minus the number of default attributes already added, EncodeAttributes() writes beyond the array bounds, causing stack memory corruption. In WOLFSSL_SMALL_STACK builds, this becomes heap corruption. Exploitation requires an application that allows untrusted input to control the signedAttribs array size when calling wc_PKCS7_EncodeSignedData() or related signing functions.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-0819 A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality. In wc_PKCS7_BuildSignedAttributes(), when adding custom signed attrib… https://www.cve.org/CVERecord?id=CVE-2026-0819
Post summary
The text announces CVE-2026-0819, describing a stack buffer overflow in wolfSSL's PKCS7 SignedData encoding, but provides no PoC, exploit code, or patch information.
CVE-2026-0819 Stack Buffer Overflow in wolfSSL PKCS7 SignedData Encoding Functionality https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0819
Post summary
The excerpt announces a stack buffer overflow (CVE‑2026‑0819) affecting wolfSSL’s PKCS7 SignedData encoding, linking to a Vulmon detail page but offering no PoC, exploit, or mitigation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wolfssl | wolfssl | - | - | - |