go-crypto-winnative BCryptGenerateSymmetricKey memory leak

Calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time...

CVE-2025-25199

go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation CNG. Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to "cng.TLS1PRF" don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41...

PT-2025-7055

Name of the Vulnerable Software and Affected Versions: go-crypto-winnative versions prior to 1.23.6-2 go-crypto-winnative versions prior to 1.22.12-2 go-crypto-winnative version 0.0.0-20250211154640-f49c8e1379ea Description: The issue is related to the go-crypto-winnative Go crypto backend for...

CVE-2025-25199: Missing Release of Memory after Effective Lifetime

go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation CNG. Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41...