AIKIDO-2026-10395

TL;DR

Affected versions of this package are vulnerable to a memory safety issue due to insufficient validation of input data during parsing of cryptographic structures. Malformed or specially crafted input may bypass expected bounds checks, leading to out-of-bounds memory access or excessive resource consumption. An attacker able to supply such input, for example via certificates or encoded parameters, could trigger crashes or undefined behavior in applications using the library. The issue is addressed by introducing stricter validation and bounds checking before processing input data.