wolfSSL Out-of-Bounds Heap Read Vulnerability in PKCS7 Enveloped Data Decoding

A vulnerability exists in wolfSSL versions through 5.8.4, allowing a 1-byte out-of-bounds heap read in the function wc_PKCS7_DecodeEnvelopedData. This issue can be triggered by a crafted CMS EnvelopedData message containing zero-length encrypted content. It's important to note that PKCS7 support is disabled by default.

Impact

Exploitation of this vulnerability leads to a 1-byte out-of-bounds heap read, which can potentially be exploited to cause a heap-based buffer overflow.

Remediation

Users can upgrade to wolfSSL version 5.8.5 or later, where this vulnerability has been addressed.