Threats tagged 'ghsa-h6gc-rmv2-74g6'

A heap buffer overread vulnerability exists in the function wc_PKCS7_DecodeEnvelopedData when parsing specially crafted PKCS7 EnvelopedData. This flaw could potentially be triggered by attacker-controlled data delivered via S/MIME or CMS protocols. No known exploits are reported in the wild. The vulnerability is classified as CWE-125 (Out-of-bounds Read).