https://seclists.org/oss-sec/2026/q2/1000: Common PKCS#7 / CMS parsing issues in OpenSSL, WolfSSL, Bouncy Castle, & GnuPG
Published Jun 22, 2026
·Updated
Affected Software
4 affected components
OpenSSL OpenSSL
wolfSSL wolfssl
Bouncy Castle Bouncy Castle<1.85
gnupg GnuPG
Frequently Asked Questions
1
What is the severity of CVE-2026-34182?
CVE-2026-34182 is classified as a high severity vulnerability due to its potential for allowing unauthorized data manipulation.
2
How do I fix CVE-2026-34182?
To mitigate CVE-2026-34182, update to the latest version of OpenSSL or the affected libraries that include the fix for this vulnerability.
3
What affects CVE-2026-34182?
CVE-2026-34182 affects the PKCS#7 and CMS parsing functions in OpenSSL, WolfSSL, Bouncy Castle, and GnuPG.
4
Is CVE-2026-34182 easy to exploit?
Exploitation of CVE-2026-34182 is feasible, as it exploits faulty length validation in the parsing of cryptographic data.
5
What action should users of affected software take regarding CVE-2026-34182?
Users of affected software should urgently apply available patches or updates to protect against the vulnerabilities outlined in CVE-2026-34182.