CVE-2026-118374

LibreSSL ocspcheck through version 4.4.0 is vulnerable to a memory exhaustion vulnerability (CWE-770). The flaw exists because the application fails to limit the size of HTTP responses from OCSP responders. Malicious responders or attackers intercepting plain HTTP AIA OCSP traffic can stream unbo...