CVE-2026-6094

Summary: CVE-2026-6094 describes a heap buffer overread in wolfSSL’s wc_PKCS7_DecodeEnvelopedData when parsing crafted PKCS7 EnvelopedData, potentially triggered by attacker-supplied data via S/MIME/CMS. The CVE entry cites a CW SSL/wolfSSL component and a CVSSv4 base score of 6.3 (Medium) with a...