CVE-2026-56898

A vulnerability exists in the aes256_cmac_sw function within aes.rs due to improperly used crypto . This flaw allows for the forgery of message authentication codes over multi-block messages. Exploitation could result in a local escalation of privilege without requiring additional execution privi...

PT-2026-144449

In aes256 cmac sw of aes.rs, there is a possible way to forge message authentication codes over multi-block messages due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...