Medium severity5.4NVD Advisory· Published Apr 10, 2026· Updated Apr 29, 2026
CVE-2026-5392
CVE-2026-5392
Description
Heap out-of-bounds read in PKCS7 parsing. A crafted PKCS7 message can trigger an OOB read on the heap. The missing bounds check is in the indefinite-length end-of-content verification loop in PKCS7_VerifySignedData().
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/wolfssl/wolfssl/pull/10039nvdIssue TrackingPatch
News mentions
0No linked articles in our index yet.