Executive Summary

This vulnerability occurs in the PKCS#7 decode path of wolfSSL versions 5.9.0 and earlier. The issue is that the function responsible for decoding does not properly respect the size of the output buffer provided by the caller (outputSz). As a result, decoded content can be written beyond the allocated bounds of the buffer, potentially leading to memory corruption.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to memory corruption by writing data past the end of the intended buffer. This can cause application instability, crashes, or potentially be exploited by an attacker to execute arbitrary code or cause denial of service, depending on the context in which the vulnerable function is used.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should upgrade wolfSSL to version 5.9.1 or later, as the issue was fixed in that release.

Useful 0 Not Useful 0