https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:02:48.767556+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-330547 EUVD-2026-330547 2026-10-02T11:02:48.834237+00:00 EUVD-2026-330547 https://cve.radiocsirt.org/vuln/fkie_cve-2026-6681 fkie_cve-2026-6681 2026-10-02T11:02:48.834277+00:00

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written past the bounds of the provided buffer. This affects wolfSSL 5.9.0 and earlier and was fixed in the 5.9.1 release.

 https://cve.radiocsirt.org/vuln/ghsa-6q89-vxvr-wgv2 GHSA-6q89-vxvr-wgv2 2026-10-02T11:02:48.834310+00:00

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written past the bounds of the provided buffer. This affects wolfSSL 5.9.0 and earlier and was fixed in the 5.9.1 release.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-6681 UBUNTU-CVE-2026-6681 2026-10-02T11:02:48.834327+00:00

Affected: Ubuntu:16.04:LTS: wolfssl, Ubuntu:18.04:LTS: wolfssl, Ubuntu:20.04:LTS: wolfssl, Ubuntu:22.04:LTS: wolfssl, Ubuntu:24.04:LTS: wolfssl, Ubuntu:25.10: wolfssl

The PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded content to be written past the bounds of the provided buffer. This affects wolfSSL 5.9.0 and earlier and was fixed in the 5.9.1 release.