CVE-2026-6681

This CVE concerns wolfSSL prior to 5.9.1, where the PKCS#7 decode path ignores the caller-supplied output buffer size (outputSz), allowing decoded data to be written beyond the provided buffer. Affected: wolfSSL 5.9.0 and earlier. Impact is described as low (per CVSS 4.0), with no explicit exploi...