CVE-2026-6094 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData Posted on July 1, 2026 by Syndicated News — No Comments ↓ Information published. Continue reading CVE-2026-6094 Heap buffer overread in wc_PKCS7_DecodeEnvelopedData parsing crafted PKCS7 EnvelopedData→
CVE-2026-6678 Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info Posted on July 1, 2026 by Syndicated News — No Comments ↓ Information published. Continue reading CVE-2026-6678 Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info→
CVE-2026-55961 wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer Posted on July 1, 2026 by Syndicated News — No Comments ↓ Information published. Continue reading CVE-2026-55961 wolfSSL_PKCS7_verify() reports success for degenerate (certs-only) PKCS#7 with no signer→
CVE-2026-6329 PKCS#12 MAC verification uses attacker-controlled comparison length Posted on July 1, 2026 by Syndicated News — No Comments ↓ Information published. Continue reading CVE-2026-6329 PKCS#12 MAC verification uses attacker-controlled comparison length→
CVE-2026-11999 X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert() Posted on July 1, 2026 by Syndicated News — No Comments ↓ Information published. Continue reading CVE-2026-11999 X.509 trust-chain bypass via path-depth exhaustion in wolfSSL_X509_verify_cert()→
CVE-2026-55962 TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify Posted on July 1, 2026 by Syndicated News — No Comments ↓ Information published. Continue reading CVE-2026-55962 TLS 1.3 post-handshake authentication: server accepts Finished without client Certificate/CertificateVerify→
CVE-2026-55967 AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse Posted on July 1, 2026 by Syndicated News — No Comments ↓ Information published. Continue reading CVE-2026-55967 AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse→
CVE-2026-11703 Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption Posted on July 1, 2026 by Syndicated News — No Comments ↓ Information published. Continue reading CVE-2026-11703 Missing SNI/ALPN binding on stateful (session-ID) TLS session resumption→
