CVE-2026-34182

CVE-2026-34182 describes inadequate input validation in Cryptographic Message Services (CMS) AuthEnvelopedData processing. The issue allows processing of crafted AuthEnvelopedData where cipher and tag length fields are manipulated, potentially yielding key-equivalent functionality for a CMS recip...