CVE-2026-0177

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A missing bounds check in the do sss aes gcm 256 op() function within the crypto-aes.c file allows for a possible out-of-bounds read. This issue could result in local information disclosure, requiring System execution privileges, and does not require user interaction for exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.