CVE-2026-95692

Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...