CVE-2026-4159

1-byte OOB heap read in wc_PKCS7_DecodeEnvelopedData via zero-length encrypted content. A vulnerability existed in wolfSSL 5.8.4 and earlier, where a 1-byte out-of-bounds heap read in wc_PKCS7_DecodeEnvelopedData could be triggered by a crafted CMS EnvelopedData message with zero-length encrypted content. Note that PKCS7 support is disabled by default.

Score

CVSS 3.1 3.3 Low

Status

Analyzed - facts@wolfssl.com

Published

2026-03-19

Last modified

2026-03-20

Weaknesses

CWE-125

Affected products

• Wolfssl (Wolfssl)

References

• https://github.com/wolfSSL/wolfssl/pull/9945