EUVD-2026-121464

Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...

CVE-2026-95692

The OpenSSL library is vulnerable to a heap out-of-bounds read and incorrect IV length handling in AES-GCM-SIV . The issue occurs when EVP_CipherInit_ex() is used with an IV length other than the standard 12 bytes. If a shorter IV is provided, the implementation reads past the buffer's end; if a ...

Out-of-Bounds Read and Incorrect IV Length Handling in AES-GCM-SIV

Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...

tor/oss-fuzz-extrainfo: Use-of-uninitialized-value in RC4_set_key

Project: https://git.torproject.org/tor.git Detailed report: https://oss-fuzz.com/testcase?key=5079466983292928 Project: tor Fuzzer: libFuzzertoross-fuzz-extrainfo Fuzz target binary: oss-fuzz-extrainfo Job Type: libfuzzermsantor Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libreoffice/pptxfuzzer: Heap-buffer-overflow in EVP_CipherInit_ex

Project: git://anongit.freedesktop.org/libreoffice/core Detailed report: https://oss-fuzz.com/testcase?key=6203225368690688 Project: libreoffice Fuzzer: libFuzzerlibreofficepptxfuzzer Fuzz target binary: pptxfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type:...