CVE-2026-5500
wolfSSL's wc_PKCS7_DecodeAuthEnvelopedData() does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check. A man-in-the-middle can therefore truncate the mac field from 16 bytes to 1 byte, reducing the tag check from 2⁻¹²⁸ to 2⁻⁸.
- Score
- CVSS 4.0 8.7 High
- Status
- Analyzed - facts@wolfssl.com
- Published
- 2026-04-10
- Last modified
- 2026-04-10
- Weaknesses
- CWE-20
Affected products
References
- https://github.com/wolfSSL/wolfssl/pull/10102
