CVE-2026-14355

A flaw was found in PHP's OpenSSL extension, specifically within the AES-WRAP-PAD algorithm implementation. A remote attacker could exploit a buffer allocation flaw where the output buffer for the AES key-wrap-with-padding operation is incorrectly sized. This oversight, which fails to account for...