CVE-2026-88823

The OpenSSL AES-GCM-SIV implementation contains a flaw where a zero-length Additional Authenticated Data (AAD) update incorrectly resets all previously supplied AAD instead of leaving it unchanged. This occurs when applications supply AAD in fragments, leading to messages where the authentication...

AES-GCM-SIV AAD Forgery After Zero-length Incremental AAD Update

Issue summary: The AES-GCM-SIV implementation treats a zero-length Additional Authenticated Data AAD update as a reset of all the AAD supplied so far, instead of leaving the AAD unchanged. An application that supplies its AAD in several fragments, one of which is empty, therefore produces or...