Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered via S/MIME or CMS.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-6094 Heap Buffer Overread in PKCS7 EnvelopedData Parsing via S/MIME https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6094
Post summary
New CVE disclosed: heap buffer overread in S/MIME PKCS7 parsing; no PoC, exploit, patch, or active exploitation details provided.
🚨*CVE* CVE-2026-6094 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered… https://www.cve.org/CVERecord?id=CVE-2026-6094 ----- Traducción: CVE-2026-6094 Lec… http://infoflow.cloud`
Post summary
The post announces CVE-2026-6094, detailing a heap buffer overread vulnerability in the wc_PKCS7_DecodeEnvelopedData function triggered by crafted PKCS7 payloads.
CVE-2026-6094 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData. This could theoretically be triggered by attacker-supplied data delivered… https://www.cve.org/CVERecord?id=CVE-2026-6094
Post summary
The post announces a heap buffer overread vulnerability in wc_PKCS7_DecodeEnvelopedData involving crafted PKCS7 data, but offers no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wolfssl | wolfssl | - | - | - |