CVE-2026-77207 Null Pointer Dereference in PKCS#7 bundle with no certificates

[
  {
    "vendor": "The Libreswan Project",
    "product": "libreswan",
    "packageName": "libreswan",
    "collectionURL": "https://github.com/libreswan/libreswan",
    "repo": "https://github.com/libreswan/libreswan",
    "versions": [
      {
        "version": "4.7",
        "status": "affected",
        "lessThanOrEqual": "5.3.2",
        "versionType": "semver"
      },
      {
        "version": "5.4",
        "status": "affected",
        "lessThanOrEqual": "5.4",
        "versionType": "semver"
      },
      {
        "version": "5.3.3",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.1",
        "status": "unaffected",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected",
    "programRoutines": [
      {
        "name": "decode_cert_payloads"
      }
    ]
  }
]