CVE-2026-81692

openssl_encrypt (pip: openssl-encrypt) versions 1.4.8 and earlier fail to validate the 36-bit STREAMINFO total_samples field of FLAC files before using it to size a memory allocation via np.random.randint(size=(total_samples, channels)). A roughly 50-byte crafted FLAC file declaring ~100 million ...