CVE-2026-126792 Heap overflow via oversized RSA signature in GCP KMS signing callback

A memory-safety flaw in the key-management request-building component of the library can lead to an out-of-bounds write on the heap. A fixed-size output buffer is used under an assumption about cryptographic key size that is never validated, so when the library is embedded by a caller that suppli...

CVE-2026-126792

A memory-safety flaw exists in the key-management request-building component of a library, where an out-of-bounds write on the heap can occur. The root cause is the use of a fixed-size output buffer based on an unvalidated assumption regarding cryptographic key size. This occurs when the library ...