CVE-2026-95692

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Setting an AES-GCM-SIV IV shorter than the expected nonce length via the EVP CipherInit ex() function (or equivalent provider cipher initialization) may trigger a heap out-of-bounds read. This occurs because the software copies the caller-supplied IV into its internal state using the expected nonce size instead of the actual length provided. If a longer IV is supplied, the implementation silently truncates the trailing bytes instead of rejecting the input. This truncation breaks the binding between the IV and the authentication tag, allowing an attacker who knows a message and its tag to forge messages under a different IV if the initial bytes match. The issue specifically affects applications using an IV length other than the standard 12 bytes for AES-GCM-SIV. The out-of-bounds read is processed within the ossl aes gcm siv init() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, avoid calling EVP CipherInit ex() with an IV length other than the standard 12 bytes for AES-GCM-SIV.