EUVD-2026-121711

Issue summary: Encrypting a CMS message to an EC certificate whose group order is 1 may cause CMSencrypt or CMSencryptex to loop indefinitely. Impact summary: An attacker able to supply the recipient certificate to an application performing CMS encryption can cause that application to loop...

Infinite Loop in CMS_encrypt() With an EC Group Order of 1

Issue summary: Encrypting a CMS message to an EC certificate whose group order is 1 may cause CMSencrypt or CMSencryptex to loop indefinitely. Impact summary: An attacker able to supply the recipient certificate to an application performing CMS encryption can cause that application to loop...