GHSA-p894-8wv9-373j
An integer underflow vulnerability exists in the function wc_PKCS7_DecryptOri when processing crafted Other Recipient Info, causing incorrect length handling during decryption. This flaw could lead to unexpected behavior in the decryption process. No known exploits are reported in the wild. The vulnerability is classified as low severity.
AI Analysis
Technical Summary
CVE-2026-6678 describes an integer underflow in the wc_PKCS7_DecryptOri function triggered by specially crafted Other Recipient Info data. This underflow results in incorrect length calculations during the decryption operation, potentially causing improper processing of encrypted data. The vulnerability is identified as CWE-191 (Integer Underflow). There is no information about affected versions or available patches. No known exploitation has been reported.
Potential Impact
The integer underflow causes incorrect length handling during decryption, which may lead to decryption errors or unexpected behavior. The impact is considered low severity, and no further impact details or exploitation reports are available.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided at this time.
GHSA-p894-8wv9-373j
Description
An integer underflow vulnerability exists in the function wc_PKCS7_DecryptOri when processing crafted Other Recipient Info, causing incorrect length handling during decryption. This flaw could lead to unexpected behavior in the decryption process. No known exploits are reported in the wild. The vulnerability is classified as low severity.
CVSS v4.0
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-6678 describes an integer underflow in the wc_PKCS7_DecryptOri function triggered by specially crafted Other Recipient Info data. This underflow results in incorrect length calculations during the decryption operation, potentially causing improper processing of encrypted data. The vulnerability is identified as CWE-191 (Integer Underflow). There is no information about affected versions or available patches. No known exploitation has been reported.
Potential Impact
The integer underflow causes incorrect length handling during decryption, which may lead to decryption errors or unexpected behavior. The impact is considered low severity, and no further impact details or exploitation reports are available.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround information is provided at this time.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-p894-8wv9-373j
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-6678"]
- Ecosystems
- []
- Database Specific Severity
- LOW
- Cvss Version
- 4.0
Threat ID: 6a3ef7e827e9c79719032d16
Added to database: 06/26/2026, 22:06:32 UTC
Last enriched: 06/26/2026, 22:46:15 UTC
Last updated: 06/27/2026, 01:42:48 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.