CVE-2022-35928

AES Crypt for Linux (v3.11) reads passwords/confirmations from the command line without validating input length, potentially causing buffer overruns. The issue is not present when using -p or -k, and the fix is in commit 68761851b595e96c68c3f46bfc21167e72c6a22c and will be shipped in release 3.16...