CVE-2026-0819: Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes

Published Mar 19, 2026
·
Updated

A stack buffer overflow vulnerability exists in wolfSSL's PKCS7 SignedData encoding functionality. In wcPKCS7BuildSignedAttributes(), when adding custom signed attributes, the code passes an incorrect capacity value (esd->signedAttribsCount) to EncodeAttributes() instead of the remaining available space in the fixed-size signedAttribs[7] array. When an application sets pkcs7->signedAttribsSz to a value greater than MAXSIGNEDATTRIBSSZ (default 7) minus the number of default attributes already added, EncodeAttributes() writes beyond the array bounds, causing stack memory corruption. In WOLFSSLSMALLSTACK builds, this becomes heap corruption. Exploitation requires an application that allows untrusted input to control the signedAttribs array size when calling wcPKCS7EncodeSignedData() or related signing functions.

Affected Software

2 affected components
wolfSSL wolfssl
wolfSSL wolfssl>=5.5.0<5.9.0

Remediation

Information

Update to the patched version of wolfSSL. The fix adds proper bounds checking in wc_PKCS7_BuildSignedAttributes() to validate that the number of custom signed attributes does not exceed the available space in the fixed-size signedAttribs array, returning BUFFER_E if the limit is exceeded.

Event History

Mar 19, 2026
CVE Published
via MITRE·04:54 PM
Data Sourced
via MITRE·04:54 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:16 PM
RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2026-0819?

CVE-2026-0819 has been assessed as a high severity vulnerability due to the potential for stack buffer overflow which can lead to arbitrary code execution.

2

How do I fix CVE-2026-0819?

To mitigate CVE-2026-0819, upgrade to the latest version of wolfSSL where the vulnerability has been addressed in the PKCS7 SignedData encoding function.

3

What causes CVE-2026-0819?

CVE-2026-0819 is caused by incorrect capacity value handling in the wc_PKCS7_BuildSignedAttributes function during the encoding of custom signed attributes.

4

What software is affected by CVE-2026-0819?

CVE-2026-0819 affects wolfSSL, specifically within its PKCS7 SignedData encoding functionality.

5

What are the potential impacts of exploiting CVE-2026-0819?

Exploiting CVE-2026-0819 could result in a stack buffer overflow, potentially allowing an attacker to execute arbitrary code on the affected system.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203