AZL-82202 CVE-2026-28389 affecting package edk2 for versions less than 20240524git3e722403cd16-16

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of...