CVE-2026-87044

The Mbed TLS crypto shim driver in drivers/crypto/cryptombedtlsshim.c drives PSA multipart cipher and AEAD operations. In mbedtlscbc and mbedtlsaead, every error path after a successful psacipherencryptsetup / psaaeaddecryptsetup returned directly without calling psacipherabort / psaaeadabort...

CVE-2026-87044

The Mbed TLS crypto shim driver (located in drivers/crypto/crypto_mbedtls_shim.c) contains a memory leak vulnerability in the mbedtls_cbc() and mbedtls_aead() functions. When these functions encounter an error path after a successful setup of PSA multipart cipher or AEAD operations, they return d...

CVE-2026-87044 Memory leak in the Mbed TLS crypto shim on failed cipher/AEAD operations leads to remotely triggered crypto denial of service

The Mbed TLS crypto shim driver in drivers/crypto/cryptombedtlsshim.c drives PSA multipart cipher and AEAD operations. In mbedtlscbc and mbedtlsaead, every error path after a successful psacipherencryptsetup / psaaeaddecryptsetup returned directly without calling psacipherabort / psaaeadabort...

MAL-2026-16087 Malicious code in polygon-toolkits-validator (npm)

[email protected] exports Node crypto helper wrappers, but validateinput base64-encodes its argument and POSTs it to https://raydium-clmm.maingoal.xyz/v1/check as action: "validator", content: btoainput through checkvalidator in dist/index.js, then returns true without validating...