866 matches found
CVE-2025-15467
CVE-2025-15467 Stack buffer overflow in OpenSSL CMS AuthEnvelopedData parsing. Vulnerability A stack buffer overflow exists in evpciphergetasn1aeadparams when parsing AEAD cipher parameters e.g., AES-GCM in CMS AuthEnvelopedData content. An oversized IV overflows a 16-byte stack buffer, allowing...
CVE-2025-56801
CVE-2025-56801 AES-CFB IV Generation Vulnerability in Reolink Desktop Application 1. Overview Name : Reolink Desktop Application Version : 8.18.12 Vendor : Reolink CWE : CWE-1204: Generation of Weak Initialization Vector IV, CWE-321: Use of Hard-coded Cryptographic Key CVSS : 5.1 MEDIUM Vector...
CVE-2026-86363
Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2026-86363
Dell Live Optics Collector versions prior to 27.3.13.330 are vulnerable to a Generation of Predictable IV with CBC Mode (CWE-329) vulnerability. A low privileged attacker with local access could potentially exploit this flaw to cause Information exposure . Remediation is available via the securit...
EUVD-2026-123616
Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2026-86363
Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
SUSE CVE-2026-95692
Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...
CVE-2026-86363: Dell Live Optics Collector: Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode…
Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
PT-2026-145310
Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2026-95692
Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...
CVE-2026-95692
Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...
CVE-2026-95692 Out-of-Bounds Read and Incorrect IV Length Handling in AES-GCM-SIV
Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...
EUVD-2026-121464
Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...
CVE-2026-95692
Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...
CVE-2026-95692
The OpenSSL library is vulnerable to a heap out-of-bounds read and incorrect IV length handling in AES-GCM-SIV . The issue occurs when EVP_CipherInit_ex() is used with an IV length other than the standard 12 bytes. If a shorter IV is provided, the implementation reads past the buffer's end; if a ...
CVE-2026-95692
Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...
CVE-2026-95692: OpenSSL: Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVP_CipherInit_ex() may trigger a…
Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...
Out-of-Bounds Read and Incorrect IV Length Handling in AES-GCM-SIV
Issue summary: Setting an AES-GCM-SIV IV shorter than the expected nonce length via EVPCipherInitex may trigger a heap out-of-bounds read. Supplying a longer IV is silently truncated instead of rejected. Impact summary: An application passing a caller-supplied IV of the wrong length may crash or...
PT-2026-140433
Name of the Vulnerable Software and Affected Versions LaserGest affected versions not specified Description The mobile application encrypts stored assistance portal credentials using a hardcoded AES key and Initialization Vector IV. An attacker who obtains the application package can use these...
CLEANSTART-2026-TE66012 Issue summary: A bug has been identified in the processing of key and initialisation vector (IV) lengths
Security vulnerability affects the ruby package. Issue summary: A bug has been identified in the processing of key and initialisation vector IV lengths...